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MicroWay 


PROGRAMMING TOOLS 


Australia’s 
Mayor Distributor 
of Programming 
Tools! 


MicroWay is Australia’s 
largest distributor of 
development products. With 
over 3,000 products and 
over 20,000 customers 
throughout Australia we’ve been 
helping Australian 
developers for over 16 years. 


AUSTRALIA’S 
NUMBER 17 


Creation. Source Code Control 
Integration And a Visual Dialog Editor. 


$1970 Gees 


while stocks last 


*Currently supports English only 


RoboHelp 
Office 


The industry standard in 
Help Development 


RoboHelp Office is a powerful 
suite that lets you create full-featured Help systems 
for your Web based applications and software 
applications. This versatile tool automates the Help 
development process making it fast and easy to 
create full-featured Help. Simply add a ROboHELP 
system to your application to significantly improve 


usability. 
SAVE $900 


Developer 8.5 


With Crystal Reports you can 
easily deliver rich, interactive 
content from virtually any data 
NEW 7 source, publish it to the Web, 
“~ VERSION! and integrate it within your 

= applications. Includes flexible 
developer tools for web and Windows developers, 
a royalty-free runtime license and comprehensive 
support for development languages. 


q CodeWright 


CodeWright provides a complete 
toolkit with the ability to adapt to 
new technologies and languages. 
CodeWright standardises 
Ge development environments and 

athe 7 alleviates the need for developers 
= to continually learn the 

= al idiosyncrasies of a variety of 
development GUls. Version 6.6 features: Advanced 
StarTeam Integration; enhanced CodeSense for C#, 
Java, C and C++; Directory Differencing and Side- 
by-Side Difference Printing. 


= 
Toolkit 
_ Developers 


The Power of 
UNIX on WINDOWS! 


pier cars » Now all your UNIX knowledge is 
just as useful on Windows. MKS Toolkit for 
Developers is a Windows product for software, 
script, and Web developers, who can choose from 


~“ 


UNIX-style command-line or graphical Visual Studio ‘ 


build environments. It is ideal for developing 
common, cross-platform scripts for UNIX, Linux, 
and Windows, from a single Windows desktop. 


sales@microway.com.au 


Prices, correct at time of going to press, may change without notice. Product names are registered trademarks of their respective owners. 
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VMWare 
Workstation 


VMware delivers a flexible and safe 
computing environment by providing 
multiple virtual computers on a 
single PC. VMware is the solution for: Windows with 
Linux; Developers; Technical Support; Quality 
Assurance; Web Developers. You can create a whole 
set of virtual computers — whether you operate under 
Linux, Windows NT, or Windows 2000. And forget 
about dual booting. You can run them all at the same 
time. All your work takes place on one machine. 


Ll —- VisualSoft 


~ B _>*NetDev 
NetDev VisualSoft NetDev is a suite of power- 


packed developer-end components for 
developing interactive web applications. It consists of 21 
ready-to-be-deployed components. File transactions, 
Protocol transactions and Messaging adhereing to RFC 


standards could be achieved with greater proficiency. 


This suite implements most of the networking protocols | 


that enable socket and network related programming. 


$740 


Users rave about DevPartner, which 

is a comprehensive suite of windows- 
based, multi-language, developer/ 
productivity tools! It helps developers 
to automatically detect, diagnose and resolve software 
errors, maximise their code performance, and insure 
that their code is fully utilised and debugged. DevPartner 
for Visual C++ includes: BoundsChecker - an automatic 
runtime error debugger, TrueTime - a runtime 
performance tool, and TrueCoverage - a coverage 
execution tool. 


Custom Installations out of 
the Box in Minutes. 


7 InstallShield Express is the 
> VERSION! — easiest and most economical 

es ae solution for quickly developing 
straightforward installations. Express lets you create 
genuine InstallShield installations in less than a day, 
using a visual installation checklist as a guide. 


Express fits any budget and offers an upgrade path 
to Installshield Developer 


Tel: 1300 55 33 13 


SERVICE BEST SUPPORT 


jProbe Profiler 


Quickly eliminate performance 
bottlenecks caused by inefficient 
-»:- algorithms in Java code. JProbe 

=. Profiler combines a visual call graph 

interface and unique data collection 
technology to provide highly accurate performance 
diagnostics, including line-by-line results. JProbe 
Memory Debugger pinpoints the cause of memory 
“leaks” in Java applications by tracking which objects 
hold references to other objects. Visualise memory 
usage, including memory allocation and garbage 
collection, in real time with the intuitive Memory 

_ Usage window. 


CMX-MicroNet 
— TCP/IP stack 


True TCP/IP Networking on 8- and 16-Bit Processors 
CMX-MicroNet is a TCP/IP stack that actually 
resides and runs natively on 8-bit processors — 
embedded engineers will be impressed with its 
specifications. For example, running on an 8051 
device, it takes from 2.5K to 12K of ROM, depending 
upon the configuration and protocols utilised. The 
12K of ROM includes the Core, TCP, UDP, SLIP, 
PPP, IP, Virtual File System, Modem, and HTTP Web 
Server. RAM requirements vary depending upon the 
actual application, but start at about 
_ 160 bytes. 


Leadtools 


' LEADTOOLS is a family of toolkits 
designed for programmers to help 
you integrate raster, document, 
medical, multimedia, vector and Internet imaging into 
your applications quickly and easily. LEADTOOLS 
gives you the most flexible and powerful imaging 
technology available, offering development support 
for File Formats (60+), Image Compression, Image 
Processing, Colour Conversion, Image Display, 
Special Effects, Scanning/Capture, Common Dialogs, 
Printing, DICOM, Annotations, Forms Recognition, 
Document Clean-up, PDF, OCR, Barcode, Database, 


and more. 
SAVE $165 


UitraSuite 


Along with the familiar, easy-to- 
use interfaces of Microsoft 
Outlook, Microsoft Office and 
Windows Explorer, UltraSuite 
provides an innovative grid 
component-UltraGrid, plus UltraToolBars that is 
loaded with functionality. With 45 controls, 
UltraSuite includes everything necessary to create 
solutions that look great, and run efficiently, faster 
than ever before. Make the most of your investment 
- UltraSuite is available with optional Subscription 
Service, or the UltraSuite Enterprise Edition. 


$2215 SAVE $220 


| Chart FX 


Chart FX Client Server is a COM 
based product for developers that 
allows you to deploy powerful 
charts using VB, Visual C++, 
Delphi and Access: The Wizard 
manager will help set-up your preferred chart type 
and visual attributes, without even handling 
properties or writing code. The Annotation Extension 
allows programmers and end users to draw shapes 
and import images that can be used to highlight 
important data in the charts. Includes 400+ 
Properties, Methods and Objects. 
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RoboHelp 
Enterprise 


RoboHelp Enterprise’s new help 
technology provides development 
teams direct feedback about end users questions 
and problems. RoboHelp Enterprise increases the 
efficiency of development teams at organisations of 
any size, and simultaneously reduces the high cost 
of support with features such as feedback reports 
give you data on what users are asking, Superior 
Natural Language Search and Supports Team 
development with Fast Project Merging. 


FEATURED PRODUCT 
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AireLogic 


Program mobile devices 


AireLogic is an IDE that gives you 
_the ability to create wireless 
applications quickly without the 
need of intensive programming 
_— knowledge. With AireLogic’s 
flowchart-style interface, you can 
easily create an application's logic, 
connect with any database and then AireLogic’s 
algorithms will automatically generate server and 
client-side code. 


NEW 
~ PRODUCT 


e e e 
Optimizeit 
Optimizeit is a powerful profiling 


ae 
NEW  / solution for Java developers 


> VERSION! looking to rapidly track down and 


fix performance issues such as 

memory leaks and performance bottlenecks in any 
Java programs. Optimizeit is essential for the 
detection of performance issues in application 
server environments. Optimizeit provides instant 
integration with most popular application servers, 
its overhead limiting features ensure scalability and 
new offline profiling allows testing of applications 


in production environments. 
C SAVE $120 
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MicroWay guarantees that our prices 
are lower than buying directly from 
Overseas Suppliers and we'll guarantee 
to match all local prices. So you know 
that when you buy from MicroWay, 
you get a fair deal. 


*conditions apply 
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To receive a free copy of our 
latest product catalogue 
call 1300 55 33 13 
or email info@microway.com.au 
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Tired of ad fluff? Get essential developer resources with an MSDN’ Subscription. 
Want to get priority access to over 1,000 continuously-updated product 
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technologies? Get an MSDN Subscription, and start building your next 
big thing. msdn.microsoft.com/subscriptions or your nearest reseller. 
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Good and Bad Components 
Using third-party components can save time and 
money — but only if you use good ones. David Williams 
looks at how to tell the wheat from the chaff. 


Porting to 64-Bit Machines 
Carlo Kopp concludes his two-part series on how 
to prepare applications for 64-bit platforms. 
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Andrew Parsons looks at how to use .Net’s 
exception handling. 
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with Oracle9z 


Application Server. 


ORACLE 
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For details visit www.oracle.com/triple 
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editorial 


Among the Vapid and Vacuous 


By Richard Chirgwin, 
Group Editor 


Group Editor 
Richard Chirgwin (02) 9080 4456 
richard.chirgwin@informa.com.au 


Journalist 
David Masters 


Sub Editor 
Colleen Mitchell 


Contributors 


Chris Bevitt, David Britt, Pamela Clark-Dickson, 


Susan Dart, Dr Carlo Kopp, Peter Sandilands, 
David Shaw, Tony Stevenson, Mark White 


here’s an inevitable time lag between writ- 
ing a monthly magazine and distributing 
it. As I write, the World Trade Centre 
attack is still a fresh horror; as you read, that will 
have been exchanged for the emerging horror of war. 

So there’s not much point in my joining the 
parade of IT writers who fell over themselves, even 
while the fires were still burning, to try and spin 
the events of September 11th into their own sphere. 

I suppose it was natural enough: faced with 
something bigger than their brains could hold, 
the vapid and vacuous remade an act of war in 
their own image. Within a day, the most trivial of 
the American IT media were congratulating 
themselves that Internet news sites had their 
biggest day ever; the least trivial tried the more 
sober sensationalism of warning against imminent 
cyber-terrorism — as if thousands would die from 
home page defacement. 

It was breathtakingly callous, with only a 
couple of voices standing out, like the www.news- 
forge.com writer who declined to reinterpret 
death as an IT event, instead listing the companies 
likely to have lost people in the WTC. 

It was certainly not a proud moment for the 
IT media, which showed itself to be as narrow, small- 
minded and silly as the most parochial tiny-town 
local rag. If this is the best we can do, perhaps we 
should also look into the PC purchasing practices of 
the Bullamakanka Country Women’s’ Association. 

Oh well. I haven’t exactly covered myself in 
glory recently either. Sometime before the world 


turned serious, I let my sense of humour take over 
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while I was writing the briefs, and let slip some 
insulting words on a company now called Stellent. 
The company’s new country manager for this 
territory has written to me: 


In response to the recent item in Systems Developer 
about our name change from IntraNet Solutions to 
Stellent, and the rationale behind this, we wanted a 
name that more accurately represents our business as it 
has grown far beyond just intranets. 

Besides, Stellent is a bright star in the universe 
of content management solutions today. Recently 
ranked number three in the market by Aberdeen 
Group, we get the job done without shouting about it — 
our revenues for the April June period were 160 % over 
the figure for the same period last year. 

Stellent has 12 offices in 10 countries in Asia 
Pacific — with a number of high profile customers. 
Watch this space. 

Garry Munden, general manager Stellent-Australia 


OK: I was vapid and vacuous. I'd get a job on 
Wired, except that writing ad copy for the next 
dumb fad is even worse than having to eat crow. 


Richard Chirgwin 
Group Editor, IT&T. Informa Publishing 
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NVYV VV, 

FREE Resource Kit! 

Still unclear how Windows Installer Technology 
can improve your software installations? 


Resource Kit available at 
http://www.noblesys.com.au/wisekit 


Not all Windows Installer 
tools are created equal. 


As you begin traveling down the Other installation tools may get you started using Windows Installer technology, but only one 
has the power you need, both today and down the road. Wise for Windows Installer offers 

Windows® Installer highway, make both a visual, step-by-step approach to creating installs as well as the ability to view and edit 
any Windows Installer table for complete control. No other product offers this level of flexibility. 


sure you have the power you need 


With additional features such as leading edge .NET support, the most powerful MSI debugger 
to reach your destination. available, and the ability to integrate your installation with your automated 

software build process, Wise for Windows Installer is the most powerful and complete Windows 
Installer tool on the road. Don't get left behind. 


From Wise Solutions, the expert in Windows Installer technology. 
Call today to receive your FREE Windows Resource Kit. 


For more information please contact: 
Noble Systems Pty Ltd (02)9211-5900 


Software installations made easy” Web: www.noblesys.com.au * Email: info@noblesys.com.au SYSTEMS PTY LTD 
ABN 73 002 825 783 


News in Brief 


Extreme Programming (XP) Expert, 
Martin Fowler, will deliver the 
key note address at this year's 
Software Engineering Australia 
Queensland conference SEAQ2001. 
At the time of writing, Ansett was 
the official conference airline and 
was offering discounts to dele- 
gates — however, checking with 
SEA’s web site: http://www.- 
seaq.net.au/incitethefuture2001 
regarding this would be wise, after 
recent events. The conference is 
on from 29-31 October at the 
Grand Mercure Hotel, Gold Coast. 


Kinetica, a company espousing 
the virtues of Enterprise Manage- 
ment Systems (EMS), won an 
EMS contract with Optus out- 
sourcing subsidiary Source Inte- 
grated Networks. The $500,000 
contract will see Kinetica inte- 
grate Aprisma’s Spectrum and 
Opticom’s iView products to allow 
Source to constantly monitor and 
maintain all of its customer's links 
and provide them with customised 
base reports. 


Defence Systems and Engineering 
organisation, ADI, has finished a 
major project for the Western 
Australian Department of Trans- 
port using Rational Software's 
suite of development tools. The 
company built the department's 
new vehicle registration and 
driver licensing system, the 
Transport Executive and Licensing 
Information System (TRELIS) — 
integrating aspects of the 
Rational Unified Process (RUP) 
into their software development 
methodology. 


A $700,000 Start Grant from the 
Commonwealth agency Aus- 
Industry, will allow Adelaide 
development house Power Solu- 
tions, to ramp up its development 
efforts to provide an innovative 


continues page 13... 
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Where to for Merged HP/Compaq? 


Analysis 


In announcing a merger worth $US87 billion 
(since adjusted somewhat by a plummeting stock 
market), Hewlett-Packard and Compaq raised a 
set of questions which will take more than a few 
weeks to answer. 

Their announcement baited a hook for market 
analysts which they were only too keen to swallow — 
that the merger would create a brand-new services 
powerhouse ready to pitch itself against Big Blue. 
At the most superficial level that looks true: the 
merged entity will be competitive in scale with 
IBM. However, IBM generates nearly half of its 
revenue through sale of “software and services”. 

Even with all of their software/services rev- 
enues combined, HP/Compaq will be a minnow 
by comparison, offering up software/services 
totalling $US17,749 billion in 2000/2001 in 
competition with IBM’s $US45,750 billion 
(figures sourced from the Software 500 2001, 
www.softwaremag.com). 

In other words, it will be a long time before 
HP/Compag can consider itself to be eating IBM’s 
lunch in the services business. 

Using the Software 500 figures as a guide, 
it’s also clear that HP knows it will be driving the 
software/services growth: while that segment of 
HP’s business grew by more than 14% in 
2000/2001, Compaq managed just 2.1% growth. 
Both could probably take a lesson from Sun, 
which outshone most of the big names; nearly all 
of Sun’s corporate revenue growth came from its 
45% expansion in software/services. 

The problem is that if services aren’t the 
headliner they’re cracked up to be in the merger, 
then just how good does the merger look? 

It all depends. The companies expect to get 
a couple of billion in “significant cost structure 
synergies” - for which we can read “closed facto- 
ries and staff lay-offs”. That’s nice at the board- 
room level, but with the merger process expected 
to take somewhat more than six months, it also 
means staff of the two outfits are going to put a lot 
of their energies into jockeying for position. 

And some of those “cost structure syner- 
gies” are likely to alienate significant numbers of 
the two companies’ installed base. 


Take high-performance servers first. 
Hewlett-Packard has long been drifting gently 
towards Intel’s 64-bit silicon, as has Compaq — but 
so far, RISC platforms still hold pride-of-place in 
the world of big proprietary Unix. Ex-DEC 
Compaq customers were already outraged at the 
planned retirement of the Alpha chipset; now, their 
software architecture looks under threat as well. 

Of course, HP/Compaq will put together a 
strategy to blend HP and DEC Unix variants — but 
doing so with a smooth migration strategy from 
multiple legacies into a two-pronged proprietary- 
plus-Linux future, while at the same time porting 
the whole code base to an as-yet-unproven 
processor, while also ensuring the loyalty of the 
most lucrative customer segment, looms as a 
challenge much bigger than is understood in the 
financial markets. 

Even over at HP, which dominates the part- 
nership in terms of the size of its software business 
and its own experience in that market, there’s evi- 
dence that internal politics takes precedence over 
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It will be a long time before HP/Compaq 
can consider itself to be eating IBM's 
lunch in the services business. 


99 


good decision-making: why else, in the HP/Agi- 
lent split, did HP decide to split its OpenView 
product set across two companies? 

HP’s timing is also open to question. The 
business cycle has turned against more traditional 
— and stable — IT vendors in 2001: the long 
boom has left the world seriously oversupplied 
with processing power, and hardware margins 
have collapsed. 

Compaq has suffered from this: most of its 
services business has a DEC heritage, and Com- 
paq has found itself so at sea in IT services that 
the relaunch of services strategy is an annual 
event. With its own record in services shaky, and 
the long-term services customers it acquired 
with DEC disgruntled, what made Compaq an 
attractive buy? ll Richard Chirgwin 
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Introducing 


Powerful 


Content Creation 


Crystal Reports allows you 
to create rich content from 
virtually any data source 
including XML, OLAP or 
relational. Add charts, drill- 
down, alerting, parameter 
prompts, and hyperlinks and 
turn reports into compelling, 
interactive documents or 
web content. And it’s simple 
to deliver information the 
way you want in a variety of 
formats, including XML, 
DHTML, PDF, RTF and 
Microsoft Excel. 


crystal reports. 


Turn reports into 
compelling, interactive 
documents or web content 


crystal reports. 8° 


Powerful Information Delivery for the Web 


With Crystal Reports you can easily deliver rich, interactive content from virtually any data source, 
publish it to the Web, and integrate it within applications. 


Flexible 


Developer Tools 


Flexible developer tools for 
web and Windows develop- 
ers, a royalty-free runtime 
license and comprehensive 
support for development 
languages makes Crystal 
Reports the essential 
reporting tool for database 
applications. Unleash the 
power of the Crystal Reports 
Report Engine through the 
Report Creation API and 
the Embeddable Crystal 
Reports 8.5 Designer 
Control, allowing your users 
to design reports from within 
your applications. Increase 
developer productivity with 
rapid application develop- 
ment tools like the Report 
Designer Component. 


' SPECIAL MICROWAY OFFER : 


Free Crystal Reports training CD and tee shirt with 
the first 30 orders of Crystal Reports 8.5. 


Publishing System 


Rapidly deploy your reporting 
solution to the Web with our 
powerful new web publishing 
system for easy information 
sharing. As a special offer 
to users of the Developer 
and Professional editions, 
Crystal Reports includes 
Crystal Enterprise Standard- 
free! Crystal Enterprise is 
the fastest way to get 
your high-quality interactive 
Crystal reports out to 
thousands of users across 
the enterprise. Crystal 
Enterprise is web-based, 
customisable and scalable 
enough for even the largest 
global enterprise. 


For upgrades, pricing and further information on the many new 


features in Crystal Reports 8.5, please call MicroWay on 
1300 55 33 13 or email: sales@microway.com.au 
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THREE EDITIONS 


Crystal Reports is 
available in 3 editions to 
meet the different needs 
of business users, 

IT professionals and 
developers. 


¢ Standard Edition 
° Professional Edition 
e Developer Edition 


UPGRADE! 


Benefit from these new and 
improved features: 


Web Publishing System 
including ePortfolio 


Schedule web-reports as 
often as you like and keep 
users up-to-date 


Export your reports to a 
variety of formats: PDF, XML, 
RTF, DHTML and MS-Excel; 
distribute reports by email, 
www or print 


XML access and support: 
report from XML and export 
to XML data 


Process reports up to 10 
times faster than before 


Report viewers: wide variety, 
including Java, ActiveX, 
HTML and zero-client 
DHTML viewers 


Crystal eBusiness Framework: 
a scalable, multi-server, 
mission-critical infrastructure 
for enterprise reporting 


Www.microway.com.au 


Greater involvement in online business demands greater security. — 
SecureNet provides total solutions, securing every step you take towards ful 
online and e-commerce involvement. 


Total E-Commerce Security 
Delivering e-transaction security services and solutions and implementing international standards and practices, to provide all you need to 
move confidently and securely in the e-commerce environment. 


| Total Gateway Security 
To allow e-business to be transacted securely, while ensuring the best internal protection with a combination of firewall, intrusion detection, 
content scanning and monitoring technologies. 


Total Network Security 
From the dawn of Network Security technology we have been supplying leading solutions worldwide. Twenty years later, almost every 
financial transaction conducted daily in Australia uses, at some stage, security products supplied by us. 


™M 
SECURENET 
Sydney: 02 9957 1000 Melbourne: 03 9822 7858 Canberra: 02 6260 3255 
Email: securenet@securenet.com.au Web: www.securenet.com.au 
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“Come for the Ride’ 


Calls Bullish Kaleina 


OSS 


Most software houses would feel fairly content with 
a financial year where it grew both revenues and 
profits by more than 800%, booked its first US cus- 
tomer, and had one of the year’s most successful 
IPOs on the ASX. Yet Tony Kalcina, Clarity’s 
CEO, isn’t letting himself rest on his laurels — he 
wants a successful global software company and 
what’s more, wants to drag the whole Australian 
software industry along for the ride. 

Despite the fairly dire outlook for the telco 
industry, he’s targeting growth of 30% for the 
next year. 

Going forward, Kalcina has bet a lot on the 
company’s contract with US company El Paso 
Global Networks, a proponent of the bandwidth 
trading or ‘merchant telco’ model. The contract 
was won against a number of ‘best-of-breed’ 
systems from much larger vendors — a big plus 
for the company. 

Development work done with El Paso has 
opened a commercial opportunity for the company 
with a product for bandwidth trading manage- 
ment called ‘Venice’ (from The Merchant of 
Venice) already in beta version. Kalcina spies an 
opportunity for Clarity to not only grow the $8.5 
million contract with EBGN, but also corner the 
growing ‘merchant telco’ space. 

“We're really embracing the merchant telco 
model and we now have a really good reference 
site in El Paso . . . Cisco and Cap Gemini Ernst 
and Young are both taking them very seriously,” 
Kalcina said. 

Kalcina believes strongly in the potential 
for a world-beating Australian software industry, 
saying we have the talent and ingenuity to make 
it happen, just that the mindset may need an 
adjustment. 

A concern that Kalcina has, and one that 
reappears constantly within the Australian IT 
industry, is the difficulty that small Australian 


systems Developer October 2001 


software vendors have had in securing prized 
government agency contracts. 

“Why can’t we win those contracts? It 
seems to be a unique thing that Australia suffers 
from — that we're not confident in our own capa- 
bilities and that we have software vendors who are 
world class,” Kalcina stated. 

IT Minister Richard Alston, 
responding to such claims, told Systems Developer 


Senator 


that to mandate a degree of special consideration 
wouldn’t be “a merits-based approach, and we'd 
probably be disinclined to give any guarantees.” 

However, the Minister said he would look 
at opportunities to give Australian developers 
exposure to the network of agencies and the 
government tendering process. 

“We do want to make sure that Australian 
companies are not missing out on such opportuni- 
ties and that may require forums to canvass these 
sorts of things . . . {including} networking and 
briefing opportunities to let these companies know 
how the contracting process works, and what’s 
required in a submission, and give them an oppor- 
tunity to meet with senior bureaucrats,” Senator 
Alston said. & David Masters 


“*pyony Kalcina, CEO, Clarity 


News in Brief 


and affordable patient costing 
solution. The product PowerCost 
Manager is said to reduce admin- 
istration costs for hospitals by 
providing a web-based costing 
system that tracks the cost of 
providing patient care from 
admission to discharge and will 
be commercially available in 
early 2002. 


Red Hat and 3G Lab are partner- 
ing to develop the first open 
source operating environment for 
next generation mobile devices, 
known as eCos for 2.5/3G mobile 
devices. ECos for mobiles will be 
based on Red Hat's open source 
embedded real-time operating 
system eCos (embedded config- 
urable operating system), and 
they claim it will provide a much 
richer environment that current 
WAP phones. 


Palm OS development will now 
be filed into a separate Plat- 
forms Solutions Group subsidiary 
that will also look after licensing 
the platform to manufacturers 
such as HandSpring, Sony, 
Kyocera and Symbol. The group 
is also noting huge growth in 
registered Palm OS developers, 
which has grown from 50,000 
to more than 170,000 in 18 
months — a total which has 
seen the production of more than 
10,000 commercially available 
software applications. 


Technik has won a $2 million 
grant under the Commonwealth's 
Technology Diffusion Program for 
a project, known as Geolnsight. 
Geolnsight is designed to bring 
together the spatial information 
industry and the emergency 
management community, helping 
to demonstrate the application 
of spatial systems to emer- 
gency services. 
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Advatel Dollies Up t-mal 


This means that a user could type just 


Personalisation 


Australian technology and software developer 
AdvaTel has announced its latest product, 
Bissmail — an e-mail enhancement tool for 
Microsoft Outlook and Eudora that AdvaTel 
managing director, Michael Terry, expects 
will comprise 40% of the company’s total 
revenues by the end of its first 12 months. 

Terry said that while standard email 
packages allow users — with a little trouble 
and better than average knowledge of how 
such packages work — to do cute things, 
Bissmail automates the addition of personal- 
isation via photos, company logos, voice 
messages, by-lines and others. 

Comprising some 27,000 lines of 
code, Bissmail is an overlay program for 
Outlook and Eudora that preserves existing 
address books and other features, but which 
adds the ability to store and access a number 
of Microsoft Word-based productivity 
components using programmed keystrokes, 
for example auto-correction, or automated 
inclusion of standard clauses for business 
communications (auto-text). 


50 characters and create a personalised two- 
page e-mail, Terry told Systems Developer. 

AdvaTel has applied for a patent for 
the section of code that enables Bissmail to 
maintain the integrity of an embedded 
image, regardless of how an e-mail package 
to which the e-mail is being sent imple- 
ments HTML and MIME standards. 

The company has built Bissmail 
using Microsoft developer tools and soft- 
ware, and is just about to finish porting to 
Microsoft Windows XP, with Lotus Notes 
the next port on the list. AdvaTel can’t do 
much with Microsoft Outlook Express 
because it doesn’t support MIME, and is not 
planning on porting to Novell’s Groupwise 
because “we haven't seen the market 
penetration of that is sufficient at this stage 
to justify doing a version”. 

AdvaTel will initially sell Bissmail 
via Web-site download, using volume- 
based licensing that starts at $US20 for a 
single copy, scaling down to $US10 per 
copy for quantities of 500 or more. AdvaTel 
is also developing a channel model. 


Most of the downloads of Bissmail in 
the first week of availability were to compa- 
nies that wanted to resell the software to 
their clients, as opposed to end-users, Terry 
said, with the potential being for corporates 
to offer Bissmail licenses as gratuities to 
their customer base. 

With approximately 300 million 
e-mail boxes worldwide, Terry said that 
AdvaTel doesn’t have to be highly success- 
ful, in percentage terms, in order to build a 
satisfactory business based on Bissmail. 

AdvaTel’s sell on Bissmail is that it is 
a tool that adds personalisation features to 
e-mails, that enables a company to further 
reinforce its branding in the mind of the 
recipient, and that allows a sender to intro- 
duce the purpose of the e-mail through a 
voice message. 

Terry believes that Bissmail’s core 
technology also has a number of spin-off 
vertical applications, for example, it could 
integrate with a client’s database to retrieve, 
collate and then attractively present infor- 
mation in an e-mail to send to an e-mail 
list. H Pamela Clark-Dickson 


VSL Joins a Commune 


ASP 


Virtual Supply Logic, a privately-funded 
“eBusiness” solutions provider, has devel- 
oped what it calls an Integrated Resource 
Planning system called CommuneHub, 
using Allaire’s ColdFusion and making use 
of the eXtensible Markup Language (XML) 
as the common data model. 

The hub-and-spoke type system com- 
prises 10 modules — for inventory, ordering, 
scheduling, settlement, returns, warranty, 
build to order, spares, freight forwarding 
and marketing — and makes use of e-mail 
alerts as opposed to message switching. 
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Using CommuneHub, suppliers can 
publish their inventory to a central loca- 
tion (VSL is initially concentrating on 
developing databases for the electrical, 
food, communications, engineering and 
construction communities). 

CommuneHub enables four types of 
companies to exchange information about that 
inventory: the buyer, the seller (for example, 
retailer), the carrier (for example, transport) and 
the service provider (for example, installer). 

Buyers can submit an integrated order 
into the CommuneHub, which breaks up the 
order and sends the relevant pieces of that 
order to each party for fulfillment. The 


process enables a supplier, via a carrier, to 
deliver directly to a customer, as opposed to a 
reseller, VSL CEO Patrick Byrne said, adding 
that VSL determined the business processes 
first, and then codified those processes. 

CommuneHub runs on a Microsoft 
SQL 7.0 or 2000 database, although its 
business logic is database-independent; that 
means it could also go on an Oracle or IBM 
DB2 database. The hardware supporting the 
system is Wintel, using servers from Dell, 
and the storage system is from PowerVault. 

CommuneHub is currently hosted 
at Flow Communications. M Pamela 
Clark-Dickson 
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VPN-1 is easier to manage 


than two. 


Check Point’s integrated VPN-1™ and Fire Wall-1® solution is not only easier to manage, but 
ultimately more secure than two separate solutions. When integrated, the firewall and VPN 
share the same user, resource and policy information, to provide the highest level of granular 
access control and security. With the power of centralized management, integrated user 
authentication, consolidated logging, and the utmost in security, you get the best of both 
worlds. Which explains why we have more VPN and firewall installations than anyone 
else. To satisfy your security needs for today and all your tomorrows, download our white 
paper, “Integrated VPN/Firewalls” at www.checkpoint.com/vpn1 and ease your mind. 


CHECK POINT" 


Software Technologies Ltd. 


anz @checkpoint.com ph: 1800 245 768 


©2000 Check Point Software Technologies Ltd. VPN-1 
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Enterprise Wintel: New Centre to Overcome Last Hurdle 


Hardware Platforms 


In its ambition to overcome the last hurdle 
to becoming the omnipresent computing 
platform, Intel has stepped up its cam- 
paign for the higher end of town, launch- 
ing its solution centre in North Sydney 
in September. 

The Intel Solution Centre is the 
Australian presence in the $US100 mil- 
lion 17-strong network of such centres 
worldwide, but offices in Melbourne and 
Brisbane will also have links into the 
North Sydney centre. 

The main aim of the centre is to 
encourage development on the Intel plat- 
form by providing a space for training 
and development; with test equipment 
for developers to come in and test their 
software running on the new Xeon and 
64-bit Itanium architectures. 

According to Australian Intel general 
manager, David Bolt, the centre has already 


gained a good deal of interest with applica- 
tion developers including Bullant and 
Redrock Communications, and businesses 
like Traveland undertaking development 
projects in conjunction with the centre. 
Bolt said the business case for an 
Intel-based architecture is pretty clear and 
that most had agreed with what they were 
seeing on paper: 
“They'd say ‘We like the story, it 
sounds good... but prove it to us,” Bolt said. 
“So we wanted to take a more active 
part in that customer engagement, and 
that’s where the Solutions Centre fits in.” 
The centre is predominantly outfitted 
with the chip manufacturers’ 32-bit Xeon 
processors, running on two, four and 
eight-way servers; but the centre is also 
carrying a number of servers based on the 
Itanium platform. 
Solutions Engineering Manager 
solutions centres and services (and head of 
the centre), Colin McCabe, detailed the 


centre could set up a VPN back into the 
customers’ office via a 4Mbps link that 
Macquarie Corporate have provided into 
the centre. 

McCabe also said that the centre’s 
aim was “to stimulate not just simulate,” 
a normal working environment, with load 
testing products from Mercury Interactive 
used to test loads up to 10,000 concurrent 
transactions. 

The centre also leverages the 
resources of the 17 centres worldwide — 
which has already been displayed in the 
Traveland example, with specialists from 
California and India (among 300 engineers 
worldwide) supporting the deployment. 

McCabe said the centre aims to 
bring some independence to the solutions 
centre market, providing software support 
to various platforms and equipment from 
multiple vendors: “Everything above the 
chipset, of course,” McCabe added. @ 
David Masters 


Disabled Considerations for Developers 


Developer Guidelines 


Web Developers are being reminded of their 
obligations to the disabled community, with 
the World Wide Web Consortium (W3C) 
publishing its guidelines for accessibility as a 
Candidate Recommendation in September. 

The document, the User Agent Acces- 
sibility Guidelines 1.0 provides a ruler for 
developers to gauge the accessibility of their 
browsers, multimedia players and other 
Web software. 

Its publication as a Candidate Rec- 
ommendation gives developers the go-ahead 
to implement findings in the report in 
projects. W3C has declared the report to be 
technically mature and stable after consider- 
able technical review by developers such as 
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Adobe, AOL, IBM, Microsoft, Netscape, 
Opera, RealNetworks and Sun. 

The report details the use of interfaces 
that benefit people with visual, hearing, 
physical, cognitive and neurological disabili- 
ties — and outlines how keyboard 
navigation, control over multimedia render- 
ing, configuration options, documentation, 
and communication (with specialised soft- 
ware such as speech synthesisers or screen 
magnifiers) can be factored into the software 
development process. 

The report is the fruit of the Web 
Accessibility Initiative (WAI) set up by 
W3C Director and inventor of the World 
Wide Web, Tim Berners-Lee to forward his 
vision of a Web for everyone. It can be 
viewed at: www.w3c.org/WAI. 


“The power of the Web is in its uni- 
versality. Access by everyone, regardless of 
disability, is an essential aspect,” Berners- 
Lee is recorded as saying. 

Web accessibility has also become a 
legal issue, and one which developers may 
have to be aware of. 

For example, Olympics.com had a 
complaint against it lodged with the Human 
Rights and Equal Opportunity Commission 
(HREOC), after certain areas of the site were 
found to be inaccessible to blind people. 
SOCOG ignored HREOC’s findings ordering 
certain access provisions, and was subse- 
quently fined $20,000. The findings of 
HREOC have now set international legal 
precedent in this area and developers would 
be unwise to ignore it. ll David Masters 
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Most DSL/Broadband 
providers don’t have 


the backbone for it! 


At FLOW Communications we have 
spent the past three years building 
a state-of-the-art network backbone 
enabling us to deliver reliable high- 
speed DSL/Broadband solutions. 


FLOW Broadband Solutions Offer: 
¢ Speed, in excess of ISDN and up to 
50 times the speed of dial up connections. 


¢ Reliability, through our network 
guaranteeing 99% network availability. 


¢ Accountability, our network operating 
centre’s 24 hour, 7 days a week monitoring 
with detailed reporting. 


* Convenience, uses your current phone line 


allowing simultaneous voice and data traffic. 


“1 feel the need 
for speed™” 


The FLOW network allows us to 
provide “Always On™” high-speed 
Internet access in a variety of packages 
designed for your business needs from 
SOHO to large scale applications. 


FLOW Communications range 
of solutions include: 

Web Hosting 

Virtual Private Networks 
Co-Location 

Virtual ISP 


Facilities Management 


Find out how FLOW can get 
your network racing call 
today on 1800 500 406 


Or visit www.flow.com.au 


@ 
@OO@ 
@ 


-oce FLOW 


@ ny 
communications. 


SIMPLE SOLUTIONS IN A COMPLEX WORLD™ 


BM Keeps Propellers Spinning 


Poole said the areas of ISV business 
showing the strongest activity at the 


Developer Support 


Despite the dotcom downturn, IBM has told 
delegates at its Solutions 2001 conference 
late last August that it won’t be curtailing 
its developer support. 

Gina Poole, world wide director or 
IBM’s DeveloperWorks program told 
Systems Developer the company is updating 
its developer initiatives, including the 
launch of VPN services out of its SPCs 
(solution partnership centres) whichy will 
allow ISV partners to use SPC capabilities 
remotely and securely. 


moment are the Linux space, wireless, and 
Web services. Interest in Java is still showing 
no signs of slowing, she said. 

Web services are supported by Version 
4 of WebSphere Studio, announced at 
Solutions 2001. The conference also saw the 
launch of VisualAge for Java version 4, which 
includes a beta version of the WebSphere 
Studio Application Developer. 

David Reeve of IBM Developer 
Relations in Australia, says the Aus- 
tralian ISV programs are synchronised 


New J2EE Ups Integration Ante 


Languages 


With a wave of user testimonials praising 
its improved integration capabilities, Sun 
Microsystems has unveiled the latest release 
of the Java 2 Enterprise Edition (J2EE) plat- 
form, version 1.3. 

The major upgrades to the platform 
are in the integration space, with most 
developers pointing to an easing of hassles - 
with an increasingly standardised environ- 
ment for integration. 

According to Tim Jordan, CTO of 
Cortex eBusiness, who have been working 
with the new J2EE specifications in alpha 
and beta versions, the much-heralded inte- 
gration features are a great step forward: 
“but won't be any good until you get 
industry-wide buy-in.” 

However, most application server 
and toolkit vendors should be pretty 
quick to provide support for version 1.3, 
with BEA already leapfrogging the pack, 
taking a risk that has paid off by support- 
ing many of the new specifications in its 
latest releases of the WebLogic e-business 
platform. The improved platform also 
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heats up the .Net vs J2EE debate, with 
Jordan saying that, now that Sun are fill- 
ing in the holes in their platform, the 
gap that Microsoft will need to make 
up is widening. 

“They {Sun and the Java Community 
Process} are really addressing the things 
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... Sun is really pushing the industry 
backing of its platform... 
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that have been missing from the platform, 
areas where, until now, developers have had 
to use third-party products or develop it 
themselves .. . the benefit it has [over .Net] 
is that it’s here and now and it’s being 
implemented,” Jordan said. 

Indeed, Sun is really pushing the 
industry backing of its platform, with testi- 
monials and praise from development heads 
at Oracle, BEA, Borland, Computer Associ- 
ates, Macromedia, Sybase and TIBCO listed 
on its press release. 


with the international programs, and that 
all the components of the ISV strategy 
are reflected in the local capabilities. The 
local offerings include the same levels of 
developer assistance, architectural help, 
technical training, and low-cost hardware 
and software tools as are available in 
America, Reeve said. 

Some of the support is automatically 
available to developers that sign up for IBM’s 
programs, he said. More extensive assistance 
is also available, assessed on a case-by-case 
basis depending on the opportunity the ISV 
presents for IBM. @ Richard Chirgwin 


The major upgrades in the new plat- 
form are: J2EE Connectors (the formerly 
J2EE Connector Architecture), standardising 
integration with existing back-end systems; 
the messaging API, Java Messaging Service, 
allowing applications to create, send and 
receive messages without the sender or 
receiver available at the same time; Enter- 
prise Java Beans (EJB) 2.0, which incorpo- 
rates container-managed persistence, claimed 
to simplify the development of distributed 
applications; and an increased level of 
XML integration through the Java API 
for XML Processing (JAXP). 

The specifications are accompanied by 
the release of a reference implementation (RI) 
SDK, which is available for download in 
source and binary form from the java.sun.com 
Web-site. A Technology Compatibility Kit 
(TCK) is also available, which is a Compati- 
bility Test Suite (CTS) featuring tests, tools 
and documentation that must be completed 
before licensees can use the Java Compatible, 
Enterprise Edition brand. In November, Sun 
will release a version 1.3-compatible edition 
of its Online Pet Store demonstration appli- 
cation for download. ml David Masters 
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integrated with Change Management integrated with Software Development integrated with Content Management integrated 
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integrated with System Testing 


Saoidelg 1SA9g YIM pajel8alu! 


integrated with Best Practices 
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Rational Rose® is the #1 Java development 

and Visual Modeling tool. IDC names Rational Rose the 

market leader for the fifth year in a row.* Now you can control the 

synchronization between code and models. Choose the entire model or select 

model elements. Turn it on all the time or only when you want. Rational Rose is 

tailored for easy and efficient developer use. It packs the power to help you build 

better software, faster. Gain full life-cycle support for Java source code including J2SE™, J2EE™ 

and J2ME™ platforms. Resilient and component-based architecture developed with Rational Rose 

substantially reduces application rewrites associated with code-only based g i 

software development. Put Rational Rose on your team and gain the flexibility, Ration al 
extensibility and compatibility that professional Java developers choose first. the e development company: 


integrated with Content Management 


Log-on to www.rational.com/australia/jdj for more 
information and a Java white paper and CD. 
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Extreme Programming 


David Shaw looks 
at why we need 
development 
processes — and 
how the latest 
Extreme Program- 
ming is different. 


in Context 


n the business of developing software, a 

company has two significant assets: the staff 

that develops its software and the process 
they use to develop it. 

A software process codifies how software is 
developed. Typically, it specifies the various roles 
for staff (for example architect, coder, tester) and 
the work products (or artefacts) to be produced 
(for example requirements, architecture, analysis 
and design models, code, test cases, test results). 
It also specifies the order in which work products 
are produced. 

The state of the art suggests that work prod- 
ucts be produced iteratively. That is, cycles of 
requirements, analysis, design, code, test. Early 
cycles focus on key functionality. At the end of each 
cycle something has been produced, more about the 
system is known, and a new cycle can commence 
building on what has been produced so far. 

This contrasts with the prior state of the art — 
the waterfall model. In this model, all the require- 
ments were done first; these were analysed and a 
design produced, which was implemented, then 
tested. This all-or-nothing approach had several 
weaknesses. The high-level tasks of understanding 
and analysing the requirements and producing a 


design are done upfront, when the system and what 
is required of it are least understood. There was 
limited scope for changing requirements once the 
requirements stage was complete, and it was expen- 
sive to do so. Customers did not see any product 
until the very end. Quite often it was not what 
they wanted. 

In today’s market requirements change, 
often quite quickly. Customers’ needs evolve or are 
altered when their market conditions change. As a 
product is developed, it is not just the developer 
that learns what the customer wants; the customer’s 
understanding also grows. A software process needs 
to be able to manage changing requirements. 

Developing a software product involves risk 
for both the developer and the customer. Is it 
technically feasible within a timeframe useful to 
the customer? Will the project be cancelled, 
become unmaintainable or have too many defects? 
Will the customer’s business be misunderstood or 
will their business conditions change? 

A software process needs to be able to manage 
risk. Risks must be identified early, and minimised. 
If they can’t, a project may have to be abandoned, 
but better that this happen before a large invest- 
ment has been made. 

The finished product has many desirable 
features, for example matching the requirements, 
correctness, robustness, well-tested, easy to maintain. 
A software process must ensure all the qualities of 
a product are present. 

Development staff come and go. It must be 
easy to bring new staff up to speed and have them 
productive as soon as possible. If key staff leave, 
their departure should have minimal impact on 
the project. A software process must manage the 
people who use it. 

A process should be easy to understand and 
repeat. Each time a process is re-used, it should be 
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possible to accurately estimate its duration based 
on previous work. 

The waterfall model had several of the 
above features. The two it lacked most were the 
ability to manage risk and change. 

Good software can be produced using the 
waterfall model. However, it is probably best suited 
to small projects or projects that have well-under- 
stood requirements that are unlikely to change. The 
scarcity of such projects probably helped drive the 
adoption of iterative software processes. 

Let’s look at two popular software processes 
in the market place. They are relatively new, but 
both have roots going back a decade or so. They 
are the Rational Unified Process (RUP) and 
Extreme Programming (XP). Both are iterative 
processes. Both focus on managing risk and 
change, with RUP emphasising risk mitigation 
and XP embracing change. 

RUP is based around the Unified Modelling 
Language (UML) and is Use Case driven. A Use 
Case is a complete set of actions, initiated by an 
actor (someone or something outside the system) 
that provides visible value. RUP is also huge. Its 


documentation, while very thorough, is vast. It 
takes a long time to become familiar with all 
aspects of the process. This doesn’t prevent work 
from being done. RUP has many well-defined roles 
and by spreading the key roles over a team, the 
team as a whole can start being productive quickly. 
RUP emphasises six best practices: develop itera- 
tively, manage requirements, use component-based 
architectures, model visually, continuously verify 
quality and control change. 

RUP defines four development phases over 
the lifetime of a product: inception, elaboration, 
construction and transition. Within each phase 
one or more iterations takes place. To support the 
aforementioned best practices, RUP also defines 
roles, discipline, activities and artefacts. 

During Inception, a business case for building 
the software is made. A vision statement is 
developed, the scope of the project is determined and 
an initial project plan is developed. The initial Use 
Case model is then created, along with an initial 
Elaboration iteration and a project acceptance plan. 
Finally, in keeping with RUP’s focus on risk 
mitigation, a risk list is created. 
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extreme programming 


Extreme Programming 
... doesn't even have 
the word ‘process’ 

in its name 
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The aim of the next stage, Elaboration, is to 
create a stable architecture that will form the basis 
of most of the design and implementation that 
takes place in the Construction phase. The archi- 
tecture must consider the major requirements and 
risks identified during Inception. 

The primary artefact created during Elabo- 
ration is the System Architecture Document 
(SAD). This document acts as a single source for 
all the major technical information of the project. 
It contains architecturally significant Use Cases 
and key mechanisms and design elements. An 
iteration plan for Construction is also developed. 
The plan specifies which Use Cases will be con- 
structed during each iteration. 

The Construction phase is where the system 
is developed. Scenarios (specific flows through 
Use Cases) are developed and analysed. Analysis 
models are created using Class, Sequence, Collab- 
oration and/or State Diagrams. The analysis 
artefacts are then used to create the design model. 
Finally the code and unit tests are written. Test 
Cases (based on the Use Cases) are also developed 
to verify the result. There should be a strong, 
verifiable path from a requirement to a Use Case, 
to an analysis model, to a design, to code and a 
Test Case to ensure that what is developed meets 
the requirements. 

Other artefacts developed during Construc- 
tion can include training materials, a deployment 
plan and a Transition iteration plan. 

Transition focusses on ensuring the software 
is available to the end-users. It includes testing 
and adjustments based on user feedback, as well as 
configuration, installation and usability issues. 
Release notes, user documentation, an installation 
guide and the final deployment plan are all 
artefacts of Transition. 

To assist with following such a large 
process, RUP defines several roles that list the 
activities performed and the artefacts to be pro- 
duced by the developer in that role. Focus areas of 
development, or disciplines, describe the detail of 
requirements, analysis, design, implementation 
and testing. Artefacts define the work products of 
the process, and activities define the way they are 
produced and evaluated. 

Allin all, RUP is a rich process, derived from 
several methodologies and the work of several of 
the leading lights in the object-oriented world. It is 
incredibly thorough and a brief summary cannot 
hope to do it justice, but hopefully can give some 
indication of its breadth and depth. 


The Extreme 


Extreme Programming differs markedly from 
RUP — indeed it doesn’t even have the word 
‘process’ in its name. 

XP is based on four values: communication, 
simplicity, feedback and courage. It’s an interesting 
starting point, as the focus is more on the people 
who will develop the software than on how it will 
be done. From the four values come five principles 
to drive development. Twelve practices govern how 
development should be done. 

Communication is significant because most 
development problems can be traced to someone 
not talking to someone else. XP keeps communica- 
tion flowing by using practices that developers 
can’t use without communication. XP also takes 
the unusual step of requiring a customer to be 
on-site to answer developers’ questions and learn 
the system as it develops. 

Simplicity requires the developers to do the 
simplest thing possible to get the current job at hand 
done. The argument goes that it is better to do a sim- 
ple thing today and pay a little to change it tomorrow, 
than pay a lot today for something not used tomorrow. 

Feedback is emphasised because of its value to 
developers, and encompasses testing, integration, 
tasks, iterations and releases. The key is the regu- 
larity of feedback. Mandatory tests give immediate 
feedback on new or modified code. Regular integra- 
tion gives daily (even hourly) feedback on the entire 
codebase. Small tasks give managers daily feedback 
on progress. Iterations give managers and customers 
weekly feedback on functionality. Releases give cus- 
tomers monthly feedback on the system as a whole. 

Courage requires developers to work at top 
speed. They can throw code away if it proves to 
have little value. They are encouraged to explore 
alternatives, try out ideas. They must start simple 
and then get complex. 

XP’s five central principles derive directly 
from the four values and they are: rapid feedback, 
assume simplicity, incremental change, embracing 
change and quality work. 

When learning anything, the time between 
an action and its feedback is critical. All feedback is 
valuable, but its value is greater the earlier it is 
received. Assuming simplicity keeps the focus on 
the current problem at hand. Every problem is 
treated as having a simple solution, to save time for 
those that don’t. A good job is done today. Little 
planning is done for tomorrow, rather, XP relies on 
developers’ abilities to add complexity tomorrow. 
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Changes are made incrementally, because 
large changes made all at once typically don’t work. 
The plan, the design, the code and even the team all 
change a little at a time. Change is embraced by 
assuming it will always be required and preserving 
options while solving the actual problem. Quality 
work is enforced because nobody actually likes doing 
sloppy work and it is typically a false economy to 
permit poor work on the grounds of speed. 


12 Pillars of Wisdom 


XP’s 12 practices are how the values and principles 
are realised by the process. They are: the planning 
game, small releases, a metaphor, simple design, 
testing, refactoring, pair programming, collective 
ownership, continuous integration, a 40-hour week, 
on-site customers and a single coding standard. 

The planning game begins with a simple 
plan. Neither business nor technical considerations 
take precedence. Business people decide issues like 
scope, priority, composition of releases and release 
dates. Technical people determine estimates, con- 
sequences, process and detailed scheduling. 

Planning is based on user stories — brief out- 
lines, typically a few sentences in length, written 
by the customer in plain language governed by the 
metaphor, of things they need the system to do. 

The practice of small releases aims to regularly 
make coherent releases that incrementally improve 
on each other. Detailed planning of releases extends 
only a month or two into the future. 

The metaphor is an overarching description of 
the project. All technical entities are consistent with 
the metaphor and everyone has a coherent story. The 
metaphor evolves over time and drives an architec- 
ture that is easy to communicate and elaborate. 

A simple design involves developing what you 
need when you need it. You don’t design for tomor- 
row because the future is uncertain and it’s cheap to 
change later. The right design at any given time runs 
all the tests, has no duplicated logic and states every 
important intention of the programmers. 

Testing drives development. The tests are 
written first, to give the programmers a better idea 
of what a component is required to do. Tests are 
run after every change and give confidence in the 
code. They are used to describe features and bugs. 
Your current task is not complete until all the 
related tests are written and run without failure. 

Refactoring is improving the internals of a 
system without changing functionality. It is used to 
improve the design of a system, make a system simpler 


or make changes easier to add. The existing tests are 
used to verify that a refactoring did not break anything. 

Pair programming requires all production 
code to be developed by two people using one 
computer. One codes, the other acts as a strategic 
thinker and checker. However, the roles swap 
dynamically during a session. On a project the 
pairs change regularly. 

Collective ownership means no-one owns a 
particular component and gives all programmers 
the freedom to change any code. With this free- 
dom comes the responsibility for the system as a 
whole, and the requirement to take any observed 
opportunity to improve the code. 

Continuous integration requires that any new 
code be integrated into the baseline within a day. 
The integrator must fix any resulting breakages, 
including the corresponding tests. For integration 
to be complete, all tests must run successfully. 

The 40-hour week is intended to keep staff 
fresh. While different people have different toler- 
ances and can handle more than 40 hours in a 
week, XP imposes the rule that you should never 
work a second consecutive week of overtime. 

An on-site customer is a real customer that 
sits with the team. They understand the business 
and are there to use and understand the system as 
it develops and answer questions. When not 
required by the team, they can do their own work. 

XP requires a single project-wide coding 
standard. If everyone can modify all the code, 
there is no room for more than one practice. 

Reviewing the practices, you may notice that 
several are not new and a few have been abandoned 
in the past because of their weaknesses. With the 
exception of testing, no practice stands well on its 
own. However XP uses all of the practices as a 
coherent set. The weaknesses of some practices are 
balanced by the strength of others. While each 
practice is simple, the richness of XP comes from 
their interaction. XP requires that you take all the 
practices to their extreme and indeed, this is where 
XP derives its name. 

There is not a lot of similarity between the 
two processes. While they are both built around 
iterative development and are designed to be 
responsive to change and to minimise risk, they 
go about it in very different ways. 

RUP is very much a process. It is tremen- 
dously detailed and very rigorous in its approach. It 
has systematic definitions for all aspects of develop- 
ment. It requires a large number of artefacts to be 
created. It is very much a heavy-weight process. 
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XP, while definitely 
a process, looks and 
feels very different. 
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XP, while definitely a process, looks and feels 
very different. There is far less detail in its defini- 
tion. You are required only to understand its philo- 
sophical foundations and implement its practices 
accordingly. There are only two artefacts, the user 
stories and the code. XP is a light-weight process. 


Philosophy 


The major differences in the processes stem from 
their different philosophical points of view. These 
include the cost of change and where to maintain 
the analysis and design documentation. 

It has long been almost axiomatic that the 
later in a product’s lifecycle you detect the need 
for a change, the more expensive that change is. 
Iterative development is in part a response to this. 
The waterfall model, with its once-through cycle, 
was clearly more expensive the further along the 
development path you were. RUP operates as a 
cycle of many small waterfalls. The cost of change 
is reduced but the underlying premise is still 
accepted. XP is built on the foundation that the 
rule no longer applies. Advances in computer 
science and XP’s practices reduce the cost of 
change to a minimum. This means that we can 
now manage change differently. 

XP argues to design for today only, because 
you can change things later for minimal extra 
cost. This idea can seem quite alien. Object- 
oriented approaches have argued for the design of 
re-usable components. First you design a compo- 
nent to meet your needs, then you round it out by 
trying to anticipate future needs. XP argues this is 
a potential waste, because the future is uncertain; 
you may never use the extra work, while still 
having to create and maintain it. 

If you keep the design as simple as possible, 
then adapting to future needs is possible and can 
wait until those future needs are known. 

For analysis and design, RUP places a lot of 
emphasis on visual modelling and maintaining 
several analysis and design artefacts. These are 
intended to convey high-level information about 
the static and dynamic behaviour of the system. They 
also help guide developers during construction. 

The trade-off is that you expend significant 
resources creating and maintaining these artefacts. 
XP argues that this shifts the focus from con- 
struction. It also must have a limit. Continually 
fine-tuning the analysis and design follows a law 
of diminishing returns. Eventually, it becomes 
counter-productive. 


In XP, the code is the repository of the 
design. XP values analysis and design but main- 
tains a minimum of analysis documentation — the 
user stories, which are kept as simple as 
possible. In XP, it is not enough to produce code 
that meets the functional requirements. The code 
must be improved until it functions as its own 
design documentation. All obscure and duplicated 
code is eliminated. All code requiring significant 
comments to be understood is reworked. This is 
achieved through constant refactoring of the code. 
It is made possible by the suite of tests that ensure 
nothing is broken during the improvement steps. 

It seems unwise to dismiss all external 
analysis and design models, however. A high- 
level visual overview is probably worth the effort. 
It will record the original intentions of the 
designers, as well as make it easier for new staff to 
gain an understanding of the system. Wading 
through code — even very clear, well-designed 
code — is probably not the best way to get an 
overview of a system. 

So what’s in the future for software process? 
In the near term, I think we’ll see more of a shift 
to light-weight processes. RUP always encour- 
aged tailoring to suit your needs, but now there 
are RUP white-papers on how to incorporate XP 
into RUP, while still arguing that the RUP 
framework adds a great deal of value. 

All software development houses need a 
development process. These days, it’s simply a 
given. But what process should you choose? As 
always in engineering, it depends. There is no 
one-size-fits-all process (yet). 

There are some hard limits. RUP is too much 
for very small teams and/or projects. In tailoring 
RUP to these situations, you end up leaving out so 
much that it’s not really RUP any more. XP, on the 
other hand and by its own admission, seems un- 
likely to scale to really large teams and/or projects. 
Its reliance on good communication would 
probably see it break down at the high end. 
Similarly, how large would a project have to be 
before collective ownership became impossible? 

It’s possible to develop both good and bad soft- 
ware using RUP and XP. There will always be the 
need to properly install, manage and continuously 
improve your development process and train your 
staff. Choose a process that suits your team, your 
company culture, your customers and your products. 


David Shaw is a Senior Software Engineer at 
itv/world. 
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is xp for you? 


Corporates see 
Extreme Program- 
ming as risky, but 
serious developers 
see quality behind 
the discipline. 
Richard Chirgwin 
interviews some 
XP users. 


ccording to Peter Moore, CEO of Cortex, 
A the biggest problem with Extreme Pro- 

gramming — XP to its friends — is the 
name. In a world that’s become hypersensitive to 
IT risks, associating business software projects 
with people jumping off cliffs is like marketing 
sushi as ‘cold, dead fish’. 

XP is the opposite of risky, Moore told 
Systems Developer: “There’s lots of testing and 
continuous integration — it’s low-risk, because 
there’s not the big bang integration of putting 
bits together at the last minute.” 

Martin Andrews, senior software engineer 
at Object Oriented, agrees that misconceptions 
abound: “people seem to get the impression that 
it’s a code-warrior process — just cut the code and 
don’t worry about doing design. 

“That’s not the case — XP supports design. But 
the process as a whole will go against the grain for 
some people, if they don’t look into the detail of it.” 

“Most of the methodologies I’ve worked 
with, like Process Mentor, focus at a high level 
across the whole process — the design, the architec- 
ture, development, testing, requirements modelling 
and so on,” Andrews said. ; 

Problem is, too much focus on the project 
means you end up ignoring the people cutting the 
software. Andrews says XP “has a lot of detail at the 
low level to help the developers to their job... . 
they’re the practices that interest me.” 


XP and the Customer 


“Customer expectations have to be reconciled . . . 
what customers are used to seeing are big, func- 
tional specifications that cover everything, and they 


Extreme Risk? 


Not if You Understane.. 


freak out if they just see a list of stories,” Moore said 
[“stories” are an XP construct — see main article]. 

Cortex doesn’t operate as a “pure” XP shop; 
Moore prefers to use XP in conjunction with other 
disciplines, partly because he doesn’t like to 
exclude good programmers just because they’re not 
XP-trained. Having non-XP involved in projects 
also helps settle customer nerves, he said — for 
example, analysts can write the kinds of docu- 
ments customers expect. 

“XP is sensational for developing quality 
software .. . but other methodologies are better at 
dealing with the customer,” he said. 

Steve Hayes, principal of Khatovar Tech- 
nology, sees ownership as the big challenge: many 
companies are uncomfortable with XP’s informa- 
tion sharing, and with their own responsibilities 
implicit in XP. “You can’t just hand over the 
requirements and complain about what you get at 
the end,” he said. 

Detailed ownership of projects works 
against the outsourcing model that people are 
used to, Hayes said: “Customers don’t view sys- 
tems development as part of their job,” he said. 

Customers and developers in XP have to 
“share their understanding of what’s required. 
XP encourages a conversation that leads to a piece 
of software.” 


XP and the Developer 


Down at the programmer level, shared ownership 
of code is new to most developers, Moore said — 
but it helps XP developers deliver better results. 
“On a day-to-day basis, there’s more collec- 
tive ownership of the code, rather than individuals 
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owning different pieces, which you have to work 
for a month to fit together,” he said. 

Moore is also pleased by XP’s attempt to dis- 
place the software development “cargo cults”. At 
one end, “companies buy lots of Coca-Cola and 
expect developers to work 80 hours a week . . . then 
they see a process-oriented environment that works, 
so they get a lot of big forms and big documents, 
and that doesn’t work either. XP is the middle 
ground, and the 40-hour week is the key principle.” 

Hayes agrees that the noticeable difference 
in XP is “its emphasis on the social aspects of 
software development.” XP is, he said, an 
attempt to address the challenge of forming a 
team: “Mostly, application development is not a 
technical challenge. We know the system can be 
built — the challenge is to find out how to organ- 
ise the people.” 

Pair programming, one of the foundation 
characteristics of XP, “is a very social exercise — 
take two overlapping but distinct skill-sets, and 
apply them to the problem at the same time.” 
Then, by rotating teams regularly, “you get the 
whole team’s input on the whole problem.” 


When it Doesn't 


Everyone agrees that XP isn’t suitable for every 
project. “For big clients with strict business 
processes, it’s difficult to do a pure XP imple- 
mentation,” Andrews said. There’s debate about 
whether XP fits large teams as well, he said: “It 
works at its best on a small scale, with a small 


Relevance in an 'e' world 
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group of people, because everybody can have a 
good understanding of the system as a whole.” 

Hayes agrees: “There are people experi- 
menting with teams of 70, but that’s at the edge 
of what XP is trying to accomplish”. He also says 
XP probably doesn’t suit environments where the 
rate of change is limited for some reason: “For 
example, in military environments where you 
can’t change quickly, you don’t want XP; but XP 
is well-suited to unpredictable environments”. 

Andrews says it’s not necessary to view XP 
as a replacement process for everything else. 
Object Oriented has found it co-exists happily 
with the company’s own Process Mentor method- 
ology; and Moore agrees, saying that in Cortex’s 
experience XP can live alongside both the Cortex 
“Core Method” process as well as processes like 
the Rational Unified Process. 

Hayes is also keen to avoid the impression 
that XP ignores requirements. While it doesn’t put 
the same stress on documentation as predecessor 
processes, Hayes says, “very little in a requirements 
document is accurate, as a rule, and only a small 
proportion of the customer’s real requirements end 
up in the document at all.” 

Any expectation that the requirements 
document will infallibly deliver good software is 
unrealistic, he said — but if documentation is 
needed, then all you need in XP is to include 
documentation in the requirements. 


Richard Chirgwin is group editor IT&T at Informa. He 
can be contacted at richard.chirgwin@informa.com.au. 
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b4-bit computing 


etting Apps Heady 


for 64-Dit Machines 


With 64-bit architec- 
tures heading for the 
standard desktop, 
application designers 
should start looking 
over their older code. 
Dr Carlo Kopp looks 
at porting to 64-bit 
machines in this 
two-part series. 


he emergence of new generation 64-bit 
T machines, be they based upon RISC 

technology or variants of newer VLIW 
technology, inevitably brings changes in pro- 
gramming technique. 

While for many programmers the com- 
plexities of the machine architectures will be 
buried in the bowels of the compiler being used, 
the differences in technology are not always so 
completely transparent that the new architecture 
can be blithely ignored. 

Architecture is relevant in two different 
respects. New applications should try and exploit 
the new platform to get maximum performance 
or functionality, while authors of existing appli- 
cations get the chance to engineer-out the prior 
limitations in performance or functionality. 


VLIW and 64-bit Architectures 


The 64-bit machine is not an entirely new item of 
technology, just as the Very large Instruction 
Word (VLIW) architecture has a well established 
history. However, neither of these technologies 
have, to date, been widely used in commodity 
desktop systems, which are the bread and butter 
of the industry. 

A 64-bit architecture differs from the well- 
established 32-bit architectures, and older 16-bit 
and 8-bit architectures, in the size of the basic data 
operand, the integer ‘word’. In a 64-bit architecture, 


an integer word comprises 64 bits or 8 bytes, 
making it twice the size of a 32-bit word. 

This has other consequences in the machine 
architecture. While the byte will remain the 8-bit 
entity we love and know, the odds are that a short 
integer type may become a 32-bit entity, and the 
size of a virtual address is apt to become a whole 
64-bits, rather than the established 32-bits. 

In floating point data types, the system is 
apt to use a double as its basic data type, rather 
than a standard IEEE 32-bit float. 

What are the aims of 64-bit architectures? 
These will depend primarily upon the applica- 
tions targeted by the machine in question. 

For engineering and scientific program- 
mers, a 64-bit processor typically offers big gains 
in achievable floating point arithmetic perfor- 
mance. This is primarily because the floating 
point Execution Units in the CPU will be 
designed to handle 64-bit double operands in a 
minimal number of processor clock cycles, as 
compared to a machine in which the basic 
operand is 32-bits wide. 

For programmers working in the database 
and commercial application environments, a 64- 
bit architecture breaks through the limitations 
inherent in a 32-bit addressing model. With 32 
bits of address, the address space is limited to 4.3 
Gigabytes. In practice, the architecture itself may 
impose additional restrictions, which might make 
it difficult to address the full 4.3 Gigabytes. 
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While 4.3 Gigabytes may seem to be a gar- 
gantuan size for an address space, it is not. Com- 
modity hardware is available today with the capaci- 
ty to fit around 1 GB of main memory, and Moore’s 
Law being what it is, we are apt to very soon cross 
that hardware barrier in very cheap machines. 

With the trend to create ever-larger appli- 
cations, the need for large virtual address spaces 
for stacks, heaps and data segments eats into 
address space very quickly. If a database file of 
several Gigabytes can be wholly mapped and then 
held in main memory, the performance of an 
application can be significantly improved over 
repeated accesses to disk storage. The difference 
between a 100 nanosecond memory and a 10 
millisecond disk is a factor of 10 million. 


instructions must be explored in ever-increasing 
depth. This problem is not unlike the look-ahead 
problem in a chess game, as with every conditional 
branch instruction seen, the stream of instructions 
forks into two, both of which must be explored to 
discover exploitable ILP. This very quickly 
becomes unmanageable, and sets practical bounds 
on how much performance can be extracted from 
a Superscalar CPU. 

VLIW aims to beat this problem by shifting 
the discovery of ILP, and optimal instruction 
scheduling, into the compiler or a runtime 
environment (Transmeta). In this manner, chip real 
estate previously committed to hardware for 
instruction stream analysis and scheduling can be 
used for more execution units, and bigger caches, 
both of which are key drivers of achievable perfor- 


CC mance. Rather than performing instruction sched- 
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Less dramatically visible gains will also flow 
from the ability to efficiently crunch 64-bit wide 
integers. Encryption and compression will benefit, 
as a bigger bite of the data can be chewed at by the 
CPU per instruction. Multimedia applications in 
which audio is processed might also benefit. Some 
signal processing applications may be able to 
exploit the greater dynamic range available. 

VLIW architectures, or variants thereof, 
such as the IA-64 model or the Transmeta model, 
are designed to deliver better performance than 
established Superscalar architectures, for a given 
amount of CPU real estate or transistor count. 

The established Superscalar architecture 
machines aim to exploit what’s called ILP 
(Instruction Level Parallelism) — the absence of 
mutual dependency between operands in a 
program. Operands without mutual dependency 
can be processed out-of-order or concurrently, 
in as many Execution Units as the processor 
might have. Superscalar architecture machines 
incorporate often very elaborate hardware, 
occupying substantial proportions of the chip, to 
determine which instructions are free of mutual 
dependencies and can be then executed at conve- 
nient times to keep all Execution Units busy for 
as much time as possible. 

The difficulty with Superscalar architecture 
machines is that, to discover more instructions 
with the ILP property, the stream of incoming 


As a result, the same amount of silicon real 
estate might yield twice as many execution units 
per CPU, potentially doubling the performance 
per unit area of chip. This can be exploited to 
cram more performance into the same area and 
same power dissipation, or to match existing 
Superscalar chip performance with a cheaper and 
more frugal slab of silicon (Transmeta). 


Application Portability 


In an ideal world, the shift between 32-bit and 64- 
bit architectures would be wholly transparent. The 
application is simply recompiled, and all remains as 
was. The application at runtime will perform better, 
how much better being very much a function of the 
application and the platform in question. 

Trivial applications, and applications which 
make little use of the more sophisticated features 
in the operating system, will most likely follow 
this pattern with little if any deviation. 

Things may become more complicated 
when applications have dependencies upon the 
basic machine architecture, or the language data 
typing is bound that architecture. 

Problems may arise in a number of areas: 

¢ Changes in the size of basic data types fol- 
lowing through system libraries; 

¢ Changes in the behaviour of arithmetic 
libraries; 

e Addressability and alignment of operands; 

¢ Alignment behaviour in shared memory; 

¢ Changes in address arithmetic arising from 
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virtual memory architecture changes, 
following through system libraries; and 
¢ Changes in interrupt handling and latencies, 

affecting real-time applications. 
With the emergence of VLIW-based architec- 
tures, such as the IA-64, the handling of 
conditional branches at a machine level changes, 
through the use of predication techniques and 
software pipelining. 


Changes in Basic Data Types 


Many of these issues will be addressed in the com- 
pilers for the new architectures, but many of these 
potential headaches will leak through. This is 
especially true of older applications and operating 
systems, which may have been, in part, written 
around the characteristic architectural idiosyncrasies 
of well-established CISC and RISC architectures. 
Well-designed datastructures will, in most 
instances, move transparently between a 32-bit and 
64-bit architecture. A side effect which may arise is 
the dependency of datastructure size upon the size 
of the basic integer operand. Where a compiler 
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continues to treat an integer as a 32-bit entity, and 
a long integer as a 64-bit entity, the odds are the 
behaviour will remain as is. Where the integer is 
in effect promoted to a 64-bit entity, then data- 
structures will automatically double in size. 

Changes in behaviour arising in this area 
are most relevant for applications which use 
very large arrays of operands, especially in scien- 
tific/engineering computing, but also in other 
applications which might need to handle such 
structures. If the array, comprising integers or 
short integers, is tens of Megabytes in size, 
doubling its size doubles the required memory, in 
turn doubling the potential cost of the hardware, if 
swapping, with its associated loss in performance, 
is to be avoided. 

An application developer or maintainer will 
need to carefully explore the behaviour of the com- 
piler when porting the application. It may well be 
that changing the data type in the structure may 
be required to preserve existing memory demands. 

Most C compilers, and derivative C++ 
compilers, will usually perform the transparent 
promotion of the basic float type to a double. As a 
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result, floating point data type behaviour is likely 
to remain the same. 


Arithmetic Libraries 


Arithmetic libraries are one of the hidden but 
vital components of any runtime environment, 
being used frequently for supporting graphical 
computations in GUIs, but also to support engi- 
neering and scientific applications, and other mis- 
cellaneous calculations. 

The principal risk which arises is, that some 
library routines may have dependencies upon the 
data types used, and changes in basic data types 
could alter the behaviour of these routines. 
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... some library routines may have dependencies 
upon the data types used... 
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While many changes, such as a doubling of 
integer sizes, will enhance the accuracy of integer 
arithmetic, subtle differences may arise, especially 
in argument passing and returns. Of particular 
concern will be binaries compiled for 32-bit bit 
versions of the same architecture, most of which 
are likely to break precisely in this area. 


Addressability and Alignment of 
Operands 


Addressability and alignment are always specific to 
the hardware in question. While it is reasonable to 
assume that most new 64-bit architectures will 
allow operands to be addressed in byte- and integer- 
sized chunks, other operands such as short integers 
may vary across architectures. Therefore, existing 
code which uses operands other than basic integers 
and bytes should be very carefully reviewed and 
tested, to ensure that it does not break. 

Alignment is the relationship between 
smaller operands and larger operands, in terms 
of how they can be accessed. In most machines, 
the basic alignment boundary is the integer, 
which is in this instance a 64-bit word. This 
means that words (integers) can only be 
addressed on address space boundaries which are 
64 byte addresses apart. Overlaps are not per- 
mitted. Bytes within the alignment boundary 
are usually individually addressable, but other 
operand sizes may not be. 


This has important implications, insofar as 
data structures cannot break this rule. Again, this 
breaks existing precompiled code. However, it 
might also break data structures in which clever 
tricks are played to cram multiple small, non-byte 
sized operands into integers. 

Yet again, the pragmatic approach is careful 
code review and testing, to isolate problem areas 
and fix them. 


Alignment Behaviour in Shared Memory 


Shared memory is a commonly-used feature in 
many modern applications. It is used either for 
interprocess communications, or, in more complex 
applications, to provide access to shared data- 
structures used by more than one process. 

In many 32-bit systems, shared memory is 
implicitly locked into integer-sized boundaries, 
often also tied to increments of a whole 512 byte 
(or larger) page size. It is reasonable to expect that 
most 64-bit systems will exhibit an identical type 
of behaviour. 

This is important with datastructures, since 
they must comply with the alignment rules. The 
same caveats thus apply as to the previous case. 


Changes in Address Arithmetic 


Changes in the size of the basic machine operand 
will inevitably result in changes in address arith- 
metic. These will arise not only from likely changes 
in the virtual memory architecture, but also from 
the need to change offsets within structures. 

Older code is frequently written with 
assumed operand sizes, and indexing into arrays 
and structures is performed using numerical 
values of offsets, rather than language or compiler- 
defined values for offsets. Where an earlier 
developer may have chosen to be clever, or lazy, 
and hard-coded offsets with numerical values 
rather than defined values, the application is 
almost guaranteed to break. 

As with previous examples, the best strategy 
for dealing with this is to carefully review the code, 
to find and isolate such instances, and rather than 
changing from the original offset size to a new off- 
set size, permanently fix the code to use a proper 
“sizeof” or equivalent syntax. 

This may be a particular problem with 
applications which use significant amounts of 
assembly code, examples being operating system 
kernels and device drivers. 
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Legacy Applications 
... Will present a 
more demanding task 


3b 


Interrupt Handling and Latencies 


Real-time applications, especially legacy applica- 
tions, may have many instances in which the 
behaviour of the code is crafted around the idio- 
syncrasies of the original target platform’s inter- 
rupt architecture, but also the latency behaviour 
of memory, I/O accesses and interrupt services. 
Transitioning such code to platforms which 
have significantly faster busses, and possibly quite 
different interrupt behaviour, needs to be done with 
some care. While many newer applications, crafted 
in higher-level languages, will behave well, since 
the compilers and libraries will address most of the 
issues, this may not be true of older applications. 


Very Large Instruction Word 
Architectures 


VLIW architectures will add other changes, in 
addition to those arising from a transition to a 64- 
bit datapath. In theory, compiler technology will 
hide most of the changes arising from VLIW from 
the programmer. 

Notable differences in VLIW vs 
CISC/RISC, at the assembly code level, will be the 
use of multiple operation multiple operand 
instructions, scheduled by a compiler to allow 
maximum parallelism. Speculative execution is 
performed using predication techniques. Signifi- 
cantly larger register sets will be used, against 
most established CISC/RISC architectures. 

Legacy applications written in assembly 
code will present an interesting challenge in port- 
ing. The massive performance gains resulting 
from the transition to VLIW mean that, in practi- 
cal terms, the justification for coding in assem- 
bler, valid when the application was crafted, 
becomes basically irrelevant in most instances. 
With the exceptions of startup code and some 
parts of an operating system kernel, there is little 
justification for retaining much, if any, assembler. 

Two basic strategies exist for dealing with 
existing assembly code applications. 

The first is to code up in a high-level lan- 
guage an emulation of the original CISC or RISC 
CPU, and then execute the assembly code on a vir- 
tual machine. This approach is not practical for 
small applications, but may be the most econom- 
ical choice for handling a very large assembly code 


application. In essence, this is the basic model 
implemented by the Transmeta architects in their 
dynamic execution model. Whether the assembly 
code module is translated at runtime or at compile 
time is basically an implementation issue. 

The alternate approach is to re-implement 
the assembly code application in a higher-level 
language such as C, and then compile it to VLIW 
instructions. Again, there are alternatives in how 
this could be implemented. The traditional 
approach is for a programmer to wade through the 
assembler and convert it, line by line, into a less- 
er number of lines of C. Another strategy might 
be to write a conversion tool which does this in an 
automated fashion. Merging these two approaches 
into a first pass of automated conversion, followed 
by a manual clean-up and commenting pass, is 
also a viable technique. 

What is clear is that most newer applications 
will port across from CISC and RISC 32-bit archi- 
tectures to 64-bit/VLIW architectures without 
unreasonably large effort. Providing that care is 
taken with the porting process and rigorous testing 
is performed, the odds are that a relatively bug-free 
port can be executed with reasonable effort. 

Legacy applications, especially those which 
contain embedded architectural dependencies and 
copious amounts of assembly code, will present a 
more demanding task. This may become a major 
issue, especially in porting real-time embedded 
applications, such as software for avionics and 
defence projects. 

It is likely that, by the middle of this 
decade, most — if not all — vendors will transition 
from 32-bit CISC/RISC technology to 64-bit 
VLIW technology. If the industry is not to face 
another Y2K scramble, it is imperative that care- 
ful forethought be given to finding the best strate- 
gies for a painless transition. 

Next month’s feature will explore machine 
arithmetic and the resulting implications of 64- 
bit architectures. 


Dr Carlo Kopp is a former computer design engineer, 
embedded programmer, Unix systems programmer and 
a Unix systems consultant, with over 15 years of 
industry experience. He currently lectures in Computer 
Science at Monash University. He may be reached via 
carlo@pha.com.au or 
http://www.csse.monash.edu.au/~carlo. 
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In the world of Web services, software 
developers have to play to a new 
audience — other software developers. 
And they'll be a demanding crowd. 
Richard Chirgwin reports. 
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f you're not one of the big names in the soft- 
| ware industry, survival depends on being 

good at what you do — you have to maintain 
user loyalty, either by doing something better 
than everyone else, or cheaper than everyone else, 
or both. 

For most ISVs, the focus of the Windows 
era has been to gather the best domain expertise 
possible, and to put that into the best software 
possible. The downside of this is that ISVs have 
made themselves inward-looking and defensive of 
their intellectual property. 

Partnering your software into someone 
else’s product has always been good business, 
because it delivers an income stream with a lower 
direct cost of sales. However, the insular and 
defensive attitude of most small ISVs has often 
restricted such partnership to a few close, and 
trusted, OEMs. 

If the pundits are right, and Web services 
becomes the new paradigm of software, then 
developers will have to get used to a different view 
of the world: one in which their ability to attract 
third-party integration will be just as important 
as domain expertise or good code. 


Simple Pleasures 


Looked at as users, third-party developers have 
the same fundamental demand as any other user 
community: ease-of-use. Ever since the invention 
of the GUI, research into ease-of-use has focussed 
on how to get rid of the manual — the holy grail 
of intuitiveness that still eludes too many soft- 
ware products. 

If the “user” of your software is another 
software process — something invoked over the 
Internet, or something called inside the same PC 
— ease-of-use still matters, but the GUI is no 
longer the respository of usability. If your user is 
a software developer, then usability means making 
your software attractive to other developers. 

On the surface, that seems easy enough: after 
all, we're talking about software developers making 
life easy for other software developers, right? Fair 
enough: but even at the big end of town, there are 
plenty of examples of software that’s impenetrable 
to the outside world. Ask anyone in the system 
integrator community what it was like trying to 
integrate other packages to SAP before the German 
giant started taking its APIs seriously. 

By making your software accessible to 
other developers, you give yourself access to 


authoring apis 


royalty streams stemming from their sales — and 
you will start preparing yourself for the world of 
Web services. 


Forgotten Discipline 


In researching this article, I was struck by three 
things. The first was how unanimously people 
endorsed the premise that “good APIs will be the 
foundation of software success”. The second: the 
ability to build good APIs is by no means wide- 
spread. The third: this is a skill not taught in 
university Comp. Sci. courses, and expertise in 
designing usable APIs is quite uncommon. 
When pressed, most software engineers are 
able to talk about the characteristics of APIs 
they’re familiar with, but in a broader sense, the 
principles of good API design are nowhere 
near as systemised as are the (mostly ignored) 
principles of good GUI desigin. 

Let’s call it the DUI — the developer user 
interface — for short, because usability to other 
developers isn’t just about the API. What makes 
a good DUI turns out to be an ill-understood 
question, but we can at least make a start. 


Smooth to the Touch 


Adam Wesley is developer relations manager for 
local small business accountancy software vendor 
MYOB, which in July launched a developer 
partnership program designed to recruit soft- 
ware partners to the MYOB package. 

Wesley told SD that other software devel- 
opers are “key partners in servicing our customers 
— so in starting out with a developer program, we 
spoke to a lot of developers putting together 
MYOB solutions. 

“What they want is a way to get to market, 
and to provide seamless, reliable connectivity. 
They want to do that as quickly as possible, and 
with as little time and effort as possible.” 

Time-to-market and simplicity are charac- 
teristics also cited by Daithi Holden, development 
manager of Accpac International. Developers have 
to stay ahead of their competition, and if they have 
to understand all of your application before they 
can use it, then they'll go somewhere else. 


Reach 


“One of the biggest winners is the success story,” 
says Gordon Turner, A/NZ senior technical 


If your user is a 
software developer, 
then usability means 
making your software 
attractive to 

other developers. 
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Daithi Holden, development manager 
Accpac International 
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support engineer at firewall vendor Check Point. 
Check Point’s own OpSec program is one of the 
security market’s success stories in terms of 
developer relations, with partners running into 
the hundreds. 

That sort of reach also feeds back into the 
quality of the DUI itself: instead of feedback 
coming from two or three partners, the OpSec 
APIs and SDKs have to satisfy a diverse and 
demanding user population, many of them with 
competing interests and expectations. 

“Ever since about 1996/97 {Check Point] 
was presenting an interface to plug into and work 
with the technologies, so the APIs were developed 
as part of the underlying code set.” 
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“It’s a property of all our objects — if you have 
to make it discrete, if you have to make it some- 
one’s job, then you're lost. It has to be a natural 
consequence of what you're doing anyway.” 

That requirement makes Holden a committed 
advocate of object architectures. It’s much easier 
to create the “self-servicing” API in an OO 
environment — a benefit often overlooked by people 
who would still prefer to ship monolithic software, 
on the basis that it only has to do one job. 


Stability 


Everybody agrees that the DUI’s stability is an 
absolute requirement: if you’ve made a feature 


Utopia is to have an architecture in which maintaining 
your application is the same as maintaining your API. 


That meant in the early days of OpSec, 
Turner said, the feedback was internal. Developers 
working on features outside the core firewall code 
had to work with the same APIs as were later 
exposed to OpSec partners, on the basis that “if 
we're able to use it ourselves, it should be 
relatively easy . . . and if you get that right, 
others will be happy to come on board later.” 

Holden agrees with Turner, that to get a 
good DUI, integration should be an architectural 
assumption rather than an option tacked onto the 
finished product. “The architecture must be 
designed to support integration with other appli- 
cations,” he said. 

In Accpac’s case, he said, that meant an archi- 
tectural decision to separate business processes from 
the user interface, so that access to those processes 
doesn’t demand replicating GUI-style interactions. 
As well, Holden said, the software objects within 
Accpac are all designed with the assumption that 
they should be individually callable. 

If the DUI is a bottom-level assumption of 
the architecture — part of the requirements docu- 
ment — then, over the long term, you'll also 
simplify your own maintenance task. 

“At the start of application architecture, 
integration must be an inherent property — if you 
have to work hard to maintain an API, you're 
lost,” Holden explained. The Utopia is to have an 
architecture in which “maintaining your applica- 
tion is the same as maintaining your API. 
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available to other developers in version 1, it’s 
extremely rash to withdraw it in version 2 — or, 
perhaps, ever. 

Holden calls this “the biggest bane of the 
software developer's life”. A developer can easily 
look at features whose continued existence seems 
archaeological, and decide that they’re stupid and 
should be ditched. 

“But out there somewhere, you can be certain 
that somebody is using the feature,” he said. 

Between versions, you can safely add to the 
API, “but take something out of the API?” he 
asks, “usually, the answer has to be no.” 

Turner agrees. “There has to be a strong 
mechanism to keep things as consistent as possible,” 
he said, “so there should always be just one point of 
reference to the APIs, the libraries, the calls.” 

At some point, of course, everything reaches 
the end of its life — but even a powerhouse like 
Microsoft will try and delay that for as long as 
possible. Just remember the hate mail directed at 
Redmond when it withdrew runtime Windows. 

When you're pulling features that other 
developers are using, Turner says, you have to be 
very careful, and you should only do it when 
there’s no other choice. 

“We haven’t had to cross that bridge so 
far . . . but we’ve had to make fundamental 
changes in the next generation code release, 
when a completely updated version of the OpSec 
code is coming out.” 
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Gordon Turner, ANZ senior technical 
support engineer, Check Point 
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It’s hard enough for a software vendor to 
cope with that sort of disruption — some of Check 
Point’s content partners are holding back certifi- 
cation to the new code, he said — but when 
your partner is someone like Nokia, embedding 
software into hardware appliances, you have to 
be even more careful. 

“These things affect their ability to go 
forward,” Turner said. “They have to update the 
hardware specifications to meet the next gener- 
ation capabilities.” 


Consistency is easier to achieve if you 
stick to standards wherever you can. 
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Radical change also has this working 
against it: unless you have the reach of Microsoft, 
obsoleting the installed base will always offer your 
competitors an opportunity. 


Standardisation 


Consistency is easier to achieve if you stick to 
standards wherever you can. Wesley says that, 
after examining all its options, MYOB decided to 
stick with the tried-and-true ODBC as the basis of 
its third-party program. 

“So we developed the MYOB Direct Driver 
and DeveloperPack — DeveloperPack is the software 
development kit for the ODBC Direct product. 

“What the partners want to see is how to 
get connected to our tables, and how to see the 
data dictionary for the back-end database.” 

Of course, those things are easy in ODBC. So 
is writing back to the database — but here, MYOB 
drew the line. “Everybody agreed that writing back 
through ODBC was fraught with dangers . . . you 
could break the integrity of the database, that was 
the big concern they all shared as a group.” 

So, despite its decision to work with the 
standard, when the standard put the environment 
at risk, MYOB changed tack: “Information being 
written back into the product has to pass through a 
business rule-checking process, as part of the SDK.” 

It’s easy to see why that’s necessary: you 
would not, for example, want someone writing 
invoices into the database if, by doing so, they 
bypassed the GST business rules. 

Holden agrees. “Once I’m interacting with 
the objects, I expect your software to prevent me 


from breaking the rules — if I make a GST mis- 
take, then I get a no-go message. 

“You can’t allow the third party to break 
the system, or to degrade the client’s data. The 
host application has to keep control of its own 
environment, and it must let me know why it’s 
rejecting something.” 

Holden says that, by opting for standards 
wherever you can to expose your software to 
partners, you make life easier for them — they 
don’t have to “read the whole book. 

“It’s a bit like what Microsoft is putting for- 
ward with .net, you have the services, and you call 
a service, and it executes according to a standard 
set of rules of integration.” 

The standardisation also feeds into the 
familiarity that Holden says is so important. Geeks 
will always be tempted by the chance to use the 
very best tools for the job, sometimes succumbing 
to the temptation to use obscure languages. If 
you want integration with third-party software, 
he said, stick with the familiar. If it’s not a 
“standard”, then at least you should try and stick 
to defactos like VisualBasic or Delphi, he said. 


The Velvet Glove 


One of the things the Web has taught us — 
even if we're slow to put the lesson into practice 
— is that users are not a homogeneous audience. The 
buzzwords “personalisation” and “customisation” 
recognise this: GUIs are better if they accommo- 
date the different needs of different users. 

It’s the same for DUIs: once you've got 
more than one OEM customer, you've got to be 
able to accommodate different needs. If you’ve got 
many OEMs, and system integrators as well, then 
Holden says you have to give them the chance to 
interface to your software at different levels. 

If you're merely offering up a utility, then 
the developer user's main interest will be func- 
tionality and performance; those developers will 
probably not be looking for flexibility and, 
because they’re using the utility to perform a 
specific function, they’ll probably only have to 
write their commands and calls once. 

But in the world of Web services, and of 
emerging “horizontal” applications like CRM 
that are designed to draw data from many 
different systems, it’s a different ball game. 
Some developers will want to talk to discrete 
objects, but others will be looking for nothing 
more than services. 
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“Look at CRM: there, you'll have a different 
view of an API. Here’s a CRM application — a 
much larger variety of people out there are going 
to try and use the API. The API is the same thing 
as a view into many databases. 

“This targets the less-sophisticated user, so 
it must, for example, be Wizard-driven. The 
screen for sales reps pulls information from the 
CRM, the accounting system, the prospects data- 
base, and puts it all together.” 


API's for Dummies 


Most corporate software vendors direct their pitch 
to the “C” class executive, their pitch designed to 
convince people who believe themselves to be 
power-users that they’ll be able to use the system. 

What’s more likely is that, after those 
power-users get thoroughly confused trying to 
figure out why the CRM system can’t automati- 
cally reconcile 10 different views of the same 
customer, they’ll flick the ticking package back to 
the IT department. 

When that happens, your software will be 
in the hands of real developers again, but they'll 
be real developers under budget stress, time stress, 
and “sick of dealing with these losers” stress. 
What they'll want is to have a DUI that offers up 
neat, self-explanatory and functional access to the 
business objects and processes they need to use. 

“You have to try and expose all of your 
applications, not just the parts you think are use- 
ful,” Holden said — but not everybody will want 
to integrate at the object level. To provide the 
higher-level access, he said, the starting point is to 
make sure the architecture “separates the UI from 
the application layer.” 

That way, he says, a stressed-out IT depart- 
ment or systems integrator that just wants to use 
a service can move upwards: “Here is the purchase 
order, just process it and return a result.” 

Wesley agrees. “In 80% of cases, people 
want to read data out of the application in the sim- 
plest and most effective way they could,” he said. 

Offering the choice between high-level and 
low-level access to the application gives a developer 
access to the broadest possible market, he said. 
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“People are coming from all sorts of places — 
tools in Excel using macros or VBA, or Delphi and 
C++ people, or companies writing e-commerce 
solutions presenting information on the Web.” 

Security technology seems a lot more eso- 
teric and, well, geeky — but Turner sees the same 
diversity among Check Point’s OpSec partners. 
Some of them share the company’s own Unix and 
C++ leanings, and want to interface at a low level. 

For those — for example management systems 
or high-availability firewall solutions — “there’s a 
large number of APIs available, like the OMI, the 
object management interface which pulls out read- 
able information about the configuration of the fire- 
wall. Or the logging information — you can use this 
interface to read the firewall’s logging information.” 

Others, like virus-checking software, want 
access to the data streams coming from the fire- 
wall to perform their own function — but they 
don’t particularly want deep interfaces to every- 
thing the firewall does. 


Simple 


Whether you’re looking at low-level or high-level 
access, Turner says, simplicity is vital. “Simplicity 
of the syntax is what matters in the API. It comes 
back to what makes a good programming 
language, with a well-presented set of libraries, 
definitions and methodologies. 

“If you can present the libraries and method- 
ologies for interacting with the language, offer 
those in standard, commonly-used development 
languages, then you make life a lot friendlier for 
the developers.” 

There are other things that will make life 
easier for the third-party developer as well. Code 
samples are absolutely mandatory, of course. 
“Most programmers can work out how to do it if 
you give them the samples,” Holden said. “But 
your SDK should also include the tools you use 
yourself to develop the software. That’s important 
— it also tells your partners you're not holding 
back a secret 10 %.” 


Richard Chirgwin is group editor IT&T at Informa. He 
can be contacted at richard.chirgwin@informa.com.au. 
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Talking Qut of the Box 


CRM Development 


Chordiant announced the Dialog Interaction Server 
—a general-purpose Web interaction sclution to 
fast-track the deployment of Web interactions. 

The Dialog Interaction Server (DIS) is based 
on Chordiant’s JX architecture, providing native 
support for J2EE and XML; as the JX architecture 
is effectively a deployment of Chordiant’s Intelli- 
gent Customer Interaction Management (ICIM) 
platform and Intelligent Business Services on 
the J2EE platform. 

The JX Architecture also allows developers 
to code at a higher level of abstraction than just 
at J2EE, meaning developers can work with 
Chordiant’s solutions and XML format data in 
application pure Java — expanding the scope of 
application development and deployment. 

The Interaction Server is Chordiant’s first 
release after the acquisition of the technology 
from ActionPoint. 


Chordiant: http://www.chordiant.com 


A Warehoused Oracle 


Data Warehousing 


Oracle announced the availability of its Warehouse 
Builder, an open and extensible solution for design- 
ing and deploying enterprise data warehouses, data 
marts and business intelligence applications. 

New performance and user interface 
enhancements in the Warehouse Builder should 
allow developers to quickly and easily update 
the structure of a data warehouse, including the 
integration of data from diverse data sources 
and legacy systems, while maintaining a current 
and accurate view of their data. 

Tightly integrated into Oracle 9i, the Ware- 
house Builder enables customers to easily extract, 
transform and load data into the 9i Database. 

Warehouse Builder is a component of the 
Oracle Internet Developer Suite and is available at no 
additional charge to licensees of the Developer Suite. 


Oracle: http://www.oracle.com 


Integration Products 
Integrate 


Integration 


iPlanet E-Commerce Solutions will incorporate 
SOAP, Java and XML into one integration plat- 
form — in a continuing trend to enable Web 
services technology in application servers and 
development environments. The iPlanet inte- 
gration platform will incorporate enterprise 
application integration (EAI), B2B integration 
and message-oriented middleware (MOM) 
systems in three different editions: 

Integration Server B2B Edition; EAI Edition; 
and Message Queue for Java. 

The EAI Edition is an upgraded version of 
iPlanet Integration Server 2.1 and includes a 
scalable business process management engine and 
new SOAP support. Additional new features 
include LDAP directory integration, iPlanet 
Message Queue integration and Forte for Java 
tools for XML and XSLT authoring. 

The B2B edition marries two previous prod- 
ucts, formerly known as iPlanet ECXpert and 
Trading Xpert, and includes new features such as 
JMS protocol support, along with Message Queue 
integration and the communications retry protocol 
for greater availability. 

Message Queue for Java was launched back 
in June, but has now been brought under this 
product suite. 


iPlanet: http://www. iplanet.com 


Tico Transforms XM 


Middleware 


Tibco announced a product it says will enable 
users to map documents in a visual setting, 
through the creation and de-bugging of Extensi- 
ble Stylesheet Language Transformation (XSLT) 
stylesheets, called XML Transform. 

Rounding out the middleware vendor's 
XML design capabilities (the Tibco Extensibility 
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Platform), XML Transform provides an enter- 
prise-class XSLT development platform based on 
open standards. 

Key features include an intuitive GUI for 
XSLT stylesheet editing, providing several 
panes for viewing and editing the XSLT source 
code, transformation errors and summaries of 
templates to guide the development process. 
The GUI utilises drag and drop mappings to 
simplify coding of XSLT stylesheets. These 
stylesheets can then be integrated into a run- 
time environment to seamlessly transform XML 
documents and messages. 

A de-bugging environment is provided 
that uses the trace feature of XML Transform, 
allowing users to view the entire mapping 
process step-by-step, to pinpoint where errors 
will occur. Other features include the ability to 
transform data into HTML as well as XML; 
Smartdrop, a schema aware feature which views 
the existing structure of an XML document and 
automatically maps like elements with the new 
schema or XML document being created; and an 
open and portable platform allowing the 
deployment of stylesheets, that can be deployed 
on best-of-breed XSLT engines. 

Available as part of the Tibco Extensibility 
product line for Windows 200/NT/98/95 and 
UNIX platforms. 


Tibco: http://www.tibco.com 


NetSmart Hus 
Encryption 


Security 


NetSmart is providing Hush Communications’ 
Hush Software Development Kit (SDK) as a 
link into its Key Server Network, which offers 
the Hush Encryption Engine as an SDK to 
its customers. 

The SDK allows developers to link front- 
end applications with secure back-end delivery 
and provides a low-cost outsourcing option for 
key pair management services. 

It allows the development of product and 
services offerings that link and utilise the Hush 
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Key Server Network, a managed network host- 
ing and distributing PKI Key pairs. 

NetSmart says that, with this offering, it 
will move its business beyond just secure 
e-mail, and into the applications space — pro- 
viding reliable and secure applications with the 
additional focus of allowing roaming capabili- 
ties and integration. 


NetSmart: http://www.netsmart.com.au 
Hush Communications: http://www.hush.com 


ntegration easy 
as is 


Integration 


BEA Systems has released WebLogic Integration, 
its J2EE-based platform for enterprise integra- 
tion. The platform combines the application 
development and deployment capabilities of the 
BEA WebLogic Server with J2EE-based applica- 
tion integration, business process management 
and B2B integration capabilities. 

Providing a ‘standards-based’ framework, 
the WebLogic Integration platform was devel- 
oped with the J2EE Connector Architecture 
(J2EE CA), and features an Adapter Development 
Kit (ADK) to streamline adapter creation, testing, 
packaging and distribution. 

There are currently more than 25 J2EE 
CA adapters for WebLogic Integration in dev- 
elopment, including adapters for applications 
such as SAP, PeopleSoft, Oracle, Siebel and 
Vignette, and more generic database, legacy, 
utility, B2B and supply chain manage- 
ment adapters. 

The Integration platform forms part of the 
BEA WebLogic E-Business Platform, which 
also includes WebLogic Server 6.1 and 
WebLogic Portal 4.0 — a combined application 
server, Web Services, integration and portal 
technology offering. 

The BEA WebLogic e-business platform 
also supports the newly ratified version of J2EE, 
version 1.3. 


BEA Systems: http://www.bea.com 
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IBM Consumes Lotus Portal 


Portals 


IBM has announced a new portal platform, combining the traditional enter- 
prise portal technology of WebSphere Portal Server with the knowledge 
management-enabled Lotus K-station. 

Leveraging the power and scalability of the WebSphere Application 
Server, the Portal Server enables companies to build portals that offer users a 
personalised, secure, single point of interaction; and supports a wide variety 
of pervasive devices. 

However, to advance the collaborative capabilities of the portal, IBM 
has integrated the user interface and collaborative component of Lotus K- 
station into the WebSphere Portal Server. With the integration, IBM 
expanded its Portal Partner Program, through which it provides a develop- 
ment platform to develop ‘portlets’, which are used to integrate application 
and other data into the portal. 

IBM has also developed new portlets for WebSphere Host On-Demand, 
URL Bookmarks, Remote File System Access, directories, POP3/IMAP 
e-mail, database query and Lotus Domino/Notes/iNotes. 

The WebSphere Portal Server runs on AIX, NT, Windows 2000 and 
Sun Solaris. 


IBM: http://www.ibm.com 
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© Renawons to Poblical Parties 
The annually updated lists of all known political 


donations to the main political parties is now 
available... 
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93 1/4USD +6 15/16 USD 
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Down with PPP 


ColdFusion and JRun Studio get with UltraDev 


macromedia 


The Solution for Rapid Web 
Application Development 


Web Development 


4 |  Macromedia’s Dreamweaver UltraDev 4 and the UltraDev Fireworks 4 
Studio is shipping with copies of ColdFusion Studio 4.5 and JRun 
Studio 3 on its release in Australia and New Zealand. 

The visual solution for Rapid Web application development, 
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Weaving web Dreams 


Dreamweaver UltraDev is authoring software allowing developers, 
programmers and designers to visually create and edit data-driven Web 
apps on multiple server platforms. 

UltraDev can link to any ODBC, ADO or JDBC database source 
or to legacy data systems through COM objects and JavaBeans. UltraDev 
4 shares the same open architecture as Dreamweaver 4, is integrated with 
Macromedia Flash and Fireworks, and can be extended and customised 
through extensions on Macromedia Exchange, or through existing 
Web standards. 


Macromedia: http://www.macromedia.com 
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AML SUMMIT 


12 — 14 February 2002 - The Rex Hotel, Sydney 


Sponsorship and Exhibition Opportunities: | Whi YOU cant miss the XML Summit. . . 


Make your company the only alternative. | Building on the success of the 2 previous XML Summits the 
Our sponsorship opportunities provide a 3rd Annual XML Summit aims to provide you with the know 


range of innovative possibilities for the how for the implementation of XML technologies into your 
exposure of your products. 


ES ye rrvesees dinfiene teats ciaitaat: organisation. The hype is falling away and it's time now to 
Deen Haniff, ph: (02) 9080 4357 seriously look into how your organisation will indeed benefit 
Email: Deen.Haniff@informa.com.au from XML or suffer in an ever increasingly competitive 
environment. Register now to guarantee your future. 
Rave reviews from last year’s event: 


“The conference covered the XML topic in great ] feasons why You must attend the XML, Summit: 


depth, entry level and also in detail” 


NSW Office of Information Technology Hear from leading XML developers 

Good balance ~ very useful” Keep up to date with the changing standards of XML 
ABC New Media Learn about successful XML integration 

“1 enjoy real world examples and case studies” Hear case studies from various XML operations 

SA Dept. of Information and Administration 


Identify the business benefit of XML for your 


“The | organisation 

€ interaction with : 

exchange of 6xoer other attendees, and the Discover the eCommerce benefits of XML for B2B 
xperience and viewpoints was 

extremely valuable, and we couldn't get this and B2C transactions 


information in any other way” 
XML Yes 2 


Services 


Understand the concept of XML security 


BOOK NOW. TO ENSURE YOUR PLACE! PLEASE PHOTOCOPY FOR EXTRA BOOKINGS CODE: SD Pozio4 
P02104 XML SUMMIT Name:.. -_ 


Yes! Please register me for: 
[] Two day conference 


Position:... 


Please send me more information about this event 


Conference notes only Address:... 


Please send me more information about this event via: 
post e-mail tel fax 


| cannot attend but please keep me updated on future events 


Please contact me to discuss sponsorship/exhibition opportunities 


For group booking enquiries, please call Cathy Lloyd on (+61 2) 9080 4307. 
For general enquiries call (+61 2) 9080 4300. 


Please return to: Cathy Lloyd, IBC Conferences, GPO Box 2728, Sydney NSW 2001, Australia. Ph: (+61 2) 9080 4307 
Fax: (+61 2) 9290 3844 email: registration@informa.com.au Register online: www.ibcoz.com.au 
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The Image Sottens 


Graphic Tools 


Softimagel3D v4.0, the latest version of the 3-D character 
animation and special effects software featuring the 
Saaphire SDK, is now shipping, with new features 
and enhancements. 

Improvements that Softimage have announced 
include multiple UV texturing, and vertex colour shading, 
interactive editing and support for Linux. 

Multiple UV texturing will allow designers to assign 
multiple UV-mapped textures on polygon mesh domains, 
using a UV domain of their choice. The Dopesheet Control 
for Shader and Custom Fcurve feature provides increased 
control over animation function curves for plug-ins and 
mental ray shaders, and Interactive Normal Editing allows 
editors to interactively edit selected shading normals on 
polygon mesh models. Code for the new features in v4.0 


ce 


il 
GH 


are exposed via the Saaphire SDK plug-in. 


Avid Australia: (02) 8977 4800 
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Developing Installation 


Installer Tools 


MicroWay has begun distributing the latest version 
of InstallShield Software's installation authoring 
solution for developers, InstallShield Developer 7.0, 
including support for Windows XP, 64-bit appli- 
cations and the Microsoft .Net Platform. 

The new solution leverages the InstallScript 
installation language, plus advanced Windows 
Installer features such as auto-repair and install-on- 
demand — recognising a shop’s existing investment 
in InstallScript, whilst progressing to Windows 
Installer, as Developer 7.0 provides full support for 
Installer 2.0. 

Developer provides Windows Installer table 
editing capabilities through the IDE, while main- 
taining support for the InstallScript language with 
over 300 specialised installation capabilities, and 
the ability to customise any part of the installation 


down to dialog sequences, file transfer, error 
handling and reboot. 

More than 20 task-based wizards and 
simplified task views simplify routine installation 
tasks; also enabling users to choose one of 33 
runtime languages, export existing project 
elements to another project for re-use and create 
project templates. 

The latest source files can be added at build 
time with linked folders, automatically find 
required file dependencies, and automatically add 
vital third-party technologies over 40 included 
merge modules. A conversion tool will also allow 
developers to convert InstallShield Professional 
scripts (version 5.5 and up) to support the 
Windows Installer installation model, the standard 
for Windows 2000 and XP. 


Microway: http://www.microway.com.au 
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Understanding Restraint Clauses — 


By Chris Bevitt and Danny Zeman 


estraint of trade clauses are a common inclusion in employ- 

ment contracts. A restraint of trade clause seeks to prohibit 

an employee from engaging in particular types of work, 
within a particular geographic area, for a specified period after ceasing 
employment with the employer. The law is suspicious of restraints in 
employment contracts, due to the employer's superior bargaining 
power and the impact the restraint can have on an employee's future 
livelihood. However, if the restraint clause is found to be reasonable 
and certain, then it will be enforceable. This article discusses the 
general principles applying to restraint clauses. 

The restraint provision must not only be reasonable from the 
employee’s viewpoint, but also from a public interest perspective. 
Further, the provision must be no wider than the interest the 
employer seeks to protect. Among other things, this means that the 
period of restriction must be no longer than necessary and that the 
geographical area of restriction must be no larger than that in which 
the employer's interest might be affected. In addition, the period of 
the restraint must be proportionate to the employment period itself. 
A third level of restraint imposed by these clauses relates to the 
nature of the prohibited conduct. 

Accordingly, the restraint of trade clause should clearly set out 
the types of conduct from which the employee is to be excluded, 
within the time period and geographic region specified. 

Also relevant to the determination of reasonableness is the 
position and responsibility held by the former employee at the time 
of termination. This verifies the level of access to confidential infor- 
mation and the level of exposure to clients the employee had. 

It may appear, on the basis of the courts’ strict approach, that 
the chances of having a wide restraint of trade provision upheld are 
slim. However, even a wide restraint can be found reasonable and 
enforceable, so long as the factors described above are satisfied. For 
employers, to maximise enforceability, the clause must be drafted 
clearly and precisely. This will ensure that a court will be able to 
determine the scope of the clause and test it for reasonableness, and 
will not invalidate the clause for being too uncertain. 

Based on the various cases, certain approaches to the structuring 
of restraint of trade clauses have developed to maximise the scope of 
coverage and the chance of enforceability. A common approach is for 
the clause to create multiple overlapping restraints by combining 
different time periods, geographic areas and types of prohibited 
conduct. A court can then strike down the restraints which are too 
wide, leaving the restraints which are reasonable. 


However, reasonableness and certainty alone will not ensure 
the enforceability of a restraint clause. Enforceability also depends on 
the provision of ‘consideration’ by the employer for the employee's 
promise not to compete. 

That is, the employee must get some form of benefit in return 
for agreeing to the restraint. In cases where the restraint clause is 
included in the original employment contract, consideration is taken 
to have been provided in the form of the employer agreeing to employ 
the employee. It is mainly where a restraint of trade agreement has 
been entered into after the employment relationship already exists 
that a problem of consideration arises, particularly if the employer 
seeks a restraint clause at the time the employee is leaving. If there is 
no consideration, the restraint clause may be unenforceable. 

In NSW, the enforceability of restraint clauses is significantly 
affected by the Restraint of Trade Act 1976. In some circumstances, 
this legislation permits courts to redraft in a limited manner a 
restraint clause that would otherwise be invalid. Of course, the extent 
to which restraints will be read down is not always predictable. If the 
clause is too uncertain, the court may simply rule the whole clause 
unenforceable, rather than rewriting it using the Act. 

So, again, it is most important that restraint of trade clauses 
are drafted with precision. 

For the reasons outlined, restraint of trade clauses are not simple. 
On top of the problems of proving reasonableness, consideration and 
avoiding invalidation or reading down under the Restraint of Trade 
Act 1976, these clauses may well scare off potential employees 
looking for a safe and unrestrictive employment contract. Employers 
must decide whether the benefits of the clause outweigh the negative 
view potential employees will have of a clause like this. 

On the other hand, the employee must weigh the desirability 
and long-term prospects of the job against the inconvenience and 
hardship resulting from an enforceable restraint of trade clause on 
departure. As the employer generally has greater assets available to 
take legal action to enforce a restraint clause, employees can be left 
in a difficult position. 

One thing is clear, leaving a court to decide on whether a 
restraint clause is enforceable is a risky proposition for the employee 
and the employer. These clauses should be drafted clearly or not at all. 


Chris Bevitt is a partner and Danny Zeman is a paralegal with the Technology, 
Telecommunications & Competition Group of Middletons Moore & Bevins. 
This column contains a general discussion of relevant law only and is not a 
substitute for appropriate legal advice. Views expressed are views of the 
authors and not necessarily the firm. Liability limited by the Solicitors’ 
Scheme, approved under the Professional Standards Act 1994 (NSW). 
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$ your Security 
Integrated! 


By Peter Sandilands 


t is becoming apparent that, despite all the 
I advances in security technology and _ tech- 
niques, breaches still occur. How can this be? 
Looking at the layered model of networking — a clue 
appears. TCP/IP, and all the other protocols and 
pieces, are purely about allowing communication to 
occur either between people or applications. On 
their own, they don’t serve any real purpose. Until 
we can effectively integrate security capabilities and 
applications, we will forever be behind in this game. 
There seem to be two approaches when 
including security in applications. The first is to 
just ignore it and assume that the IT folks deploy- 
ing the application take care of it. The second is to 
build in the capabilities needed by selecting an 
authentication method. Here, the chances are high 
that you'll select a method that is different from the 
method selected by any other developer/application 
your customer is using. 

Perhaps it’s time, as developers, that we 
looked at some of the basic guiding principles of 
security. We can judge them against what can be 
easily achieved within our applications, and what 
areas we need to rely on outside services to pro- 
vide. In earlier times, we would add capabilities to 
our applications rather than use external services — 
authentication is a classic example of this. We had 
reason to. Open, useable services were few and 
hard to use. 

The root principles of security are confi- 
dentiality, integrity and availability. Within the 
definitions of each of these, we find both the 
issues and guidance to the solutions. 

Confidentiality means that any information 
is seen only by people authorised to do so, seen 


only in the places it’s allowed to be seen and only 
when it’s allowed. Mapping those requirements to 
procedures and even technologies gives us a good 
idea of the features we need. 

Data privacy is provided by encryption. In 
fact, that is the only thing that encryption provides. 
Handily, there are well-documented algorithms 
available for us to use. There is no longer any need 
to develop our own special crypto schemes if we feel 
the need to encrypt the data inside our application. 
We could even just mandate that any data travelling 
outside the host machine is carried in a Virtual 
Private Network (VPN) and not have to include any 
encryption in our application at all. 

The ‘who can see’ element is authentication. 
How do we know who our users (be they people or 
other applications) are? Often we solve this problem 
by asking them to login to our service. We then 
have to build a user ID (UID) and password (PWD) 
mechanism into our application. That seems to be a 
reasonable approach until you realise that if every 
application did that, the end-users would need to 
remember a lot of different UIDs and PWDs. Not 
to mention the ongoing management nightmare the 
system staff would be presented. 

A solution that is often offered here is PKI 
and the use of certificates. But that, in itself, 
implies a management overhead. We even have to 
guess which certificate vendor will be the dominant 
player in times to come. Standards can save us here 
and are being developed. The PKCS series of APIs 
are slowly but surely gaining acceptance and 
support by the platform, operating system and 
security vendors. 

Whichever method we select, the end result 
is a list or database of the users and their credentials. 

The ‘when and where’ elements are achieved 
through access controls. Basic levels can be 
achieved using the facilities of the underlying 
operating system. But they are mostly limited to 
file level or disk level. We are after access control 
at the logical level. Can they see this record, field 
or even report? Those capabilities have to be added 
at the application level. 

Our user list or database now needs to gain 
attributes that define those access rights for each 
user or group of users. 

Integrity defines that the data is only 
changed by people (or applications) allowed to do 
so, that the data is what we'd expect and that it 
cannot be altered in storage or transit without the 
change being detected. There are some obvious and 
not so obvious implications of achieving this goal. 
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One that seems to be regularly overlooked 
is validating input. This can be as simple as “does 
the telephone number field contain a phone num- 
ber?” but can be as subtle as just how many char- 
acters are we normally expecting. In the ‘70s, data 
entry was a serious business. Data was keyed in 
twice, by different operators, and the input 
streams compared to ensure accurate capture of 
the written data. Today, we just seem to assume 
that whatever is typed is correct. 

Integrity also directly implies the use of 
data checking mechanisms as your application 
information flows around the network. Here you 
will use tools like Message Digests, Hashing algo- 
rithms and Digital signatures, to provide a check 
that the data has not been tampered with. Just as 
with encryption, these tools are widely available 
today. There are few reasons remaining to invent 
yet another one yourself. 

We are seeing system platforms make APIs 
available to create and use MDs, hashes and so on. 
Using them does abdicate a small amount of your 
control, but it decreases the number of code 
streams in use and decreases the number of poten- 
tial vulnerabilities. 

Availability is involved in security to make 
certain that the resources needed are accessible 
when needed. In most cases, this does not affect 
you as a developer. It is more an area that systems 
architects rule. But it does imply that few 
assumptions should be made about the underlying 
systems. You shouldn't rely on IP addresses as 
part of the authentication, for example. 

Looking at the list of features needed, one 
clearly stands out. We keep looking for a means of 
collecting, maintaining and managing informa- 
tion about users, their credentials and access 
rights. Each of the current commercial operating 
systems offers this in different ways. Yet it is 


clearly a task for a directory. A common store of 
all information about users of the system, the 
applications and even the systems themselves 
would dramatically simplify the process of man- 
aging security. 

Directories have been touted as the panacea 
to all ills for some time, yet still have failed to 
gain widespread acceptance. It will be with the 
development of open, standard access mechanisms 
such as DirXML that we will see use of directories 
with applications grow. 

There are a number of things that you can 
do as a developer to ease the integration of 
external security systems with your application. 
A very simple one is to provide a clear descrip- 
tion of the protocols used by the components of 


c¢ 


In general, using external standards-based services 
will provide you with both a higher level of security 
and a simpler development task. 99 


the application to talk to each other. That can 
make it significantly easier to set up a firewall 
rule to allow your application traffic to flow 
through any perimeter firewall while still 
applying some security checks to it. 

In general, using external standards-based 
services will provide you with both a higher level 
of security and a simpler development task. Learn- 
ing the basic principles of security will help you 
code applications that are less likely to have holes 
to be discovered and published. That’s one kind of 
publicity you can definitely do without. 


Peter Sandilands is regional director, Australia and 
New Zealand, Check Point Software Technologies. He 
can be contacted at www.checkpoint.com. 
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Sites to Support the C Programmer 


By Tony Stevenson 


elcome to this edition of Developer Sites from the 
Information Broker, where the focus this month is on 


the C/C++ programming languages. 


Quickly Accessing These C/C++ Developer Sites 

Before we begin our exploration of this month’s sites, it’s important 
to point out that a Web page has been set up so that you can quickly 
access all the sites referred to in this article from just the one spot. To 
access it, drop into The Australian Guide to Online Business 


Web-site (www.mkdsoftware.com.au/online), click the ‘Sites to 
Lookup’ link, and then click the category link labelled ‘C/C++’. 


Assembly of C++ Sites 


According to the owner of ‘Internet sites and files of interest to C++ 
users’, the site’s selection is “pretty random, and certainly doesn’t 
cover everything”. However, a comprehensive set of links has been 
set up there that covers a wide range of topics. For example, there are 
a dozen or so sites that are devoted to programming style, while 
another section lists the details of sites where you can access source 
code. Examples of just some of the other sections easily accessible 
from the home page include ‘C++ standards and documentation’; 
‘Compilers’; ‘User and special interest groups’; ‘Technical reports and 
papers’; ‘C++ news-groups’ and ‘E-mail discussion groups’. And if 
you're just starting out with the language, take a look at the offer- 
ings that are available in the ‘Learning C++’ section of the site. 


http://webnz.com/robert/cpp_site.htm] 


Microsoft Visual C++ 

C++ developers wanting to learn more about Microsoft's .NET 
strategy should point their browser at the Microsoft Visual C++ 
site. In addition to the latest news (for example, one of the 
links that was set up there when I dropped in recently was titled 
‘C# and the Web: Writing a Web Client Application with 
Managed Code in the .NET Framework’), there are other links 
that will take you to more technical articles, tutorials, tips and 
tricks, product documentation, and code samples, plus add-ons 
and components. And thanks to the resources that have been set 
up in the Toolbox section of the site, you can learn to perform 
such tasks as adding smart tags to Web pages, or alternatively, 
broaden your skills base by taking the ‘Microsoft .NET Developer 
Training Tour’. 


http://msdn.microsoft.com/visualc/ 


About.com C/C++ 

One of the outstanding features of the About.com C/C++ site, apart 
from the large amount of resources it references, is that its content 
is equally appealing to both novice and experienced programmers. 
For those just starting out, the site offers a free, 12-week online C 
programming course that’s been specially designed for beginners. 
But if you’re already a programming veteran, click on either the 
‘Advanced C’ or ‘Advanced C++’ links to discover a range of tutori- 
als in which to participate. Here’s just a small selection of the sorts 
of topics discussed in the C++ tutorials: pointers; references in C++; 
constant class methods; the main features of the Standard Template 
Library; and overloading. A bonus with the site is that you can sub- 
mit your C++ questions to the site’s resident professional and have 
them answered by e-mail (for free). 


http://cplus.about.com/ 


Cprogramming.com 

According to details published on its home page, the Cprogram- 
ming.com site is a site that’s been ‘designed to help you learn C 
or C++ and provide you with C and C++ programming 
resources’. And undoubtedly, there’s plenty of material to inves- 
tigate there. For instance, when you follow the ‘Tutorials’ link in 
the “Learn” section of the site, you'll gain access to 18 lessons that 
cover programming in C++, including everything from arrays 
and file input/output to recursion and binary trees. Other sections 
of the site include ones that focus on source code examples; C and 
C++ programming books; compilers (including DJGPP, a free 
C/C++ development system); and standard C++ functions. And 
while you're visiting the site, why not test your knowledge by 
taking the ‘C++/Computer Science MegaQuiz’. It comprises 50 
questions (the answers are supplied) and you’re timed as well (just 
to add a little pressure). 


http://www.cprogramming.com/ 
Free C/C++ Code 


Finally, if you're looking for free C/C++ source code, you might be 
able to find what you need at the snippets.org site. 


http://www.snippets.org/ 
Feedback 


If you’ve got a favourite C or C++ Web site that’s been overlooked 
here, e-mail Tony Stevenson, the Information Broker, at 
Tony.Stevenson@mkdsoftware.com.au. The details will then be 
added to the list of sites in the C/C++ category on The Australian 
Guide to Online Business site (www.mkdsoftware.com.au/online). 
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@ Software Economy 


By Mark White 


always enjoy hearing success stories from Australian software 

companies. But, as someone who passionately believes in the 

potential of this country to produce innovative and world-class 
software, I am also wary of what might be perceived as a lack of 
momentum in successful commercial exports of Australian-made 
code. And, significantly, you can be assured that the majority of the 
planet isn’t eyeballing Australia as a software powerhouse. 

In the past few years I have had the chance to join US-led 
trade delegations to India, China and the Philippines. While a 
diverse collection of countries and politics, it is an interesting com- 
parison to look at the strategies and perspectives employed by each 
government and other lobbyists to attract investment and stimulate 
economic development in their respective software industries. 

India has been the most visibly successful of the three countries 
in developing a software economy. Much of this success can be attrib- 
uted to one Dewang Mehta, the visionary former head of India’s 
National Association of Software and Service Companies (NASS- 
COM). Mehta’s untimely death in Sydney earlier this year was a sad 
event for the industry he shaped. He was eulogised not only in his 
own country — where he virtually created the software outsourcing 
movement — but also in the pages of no less than Red Herring mag- 
azine, for his role as an evangelist for the Indian software industry. 

The Indian pitch is simple — high numbers of very skilled people 
coupled with low costs. And it has been successful — massive new tech- 
nology parks are filled in Bangalore and elsewhere, as a testimonial to 
the success of these strategies. There are also significant communities of 
Indian developers in the US, adding to their already credible reputa- 
tions. But the development costs to greenback spenders now mask 
internal economic changes — as a new class of wealthy Indian program- 
mers proves to be not quite so cost-effective as their forbearers. 

But the Indian technology industry has been able to attract 
just over half a billion US dollars in the past two years from local and 
foreign venture funds. We now have the opportunity to wait and see 
what such a motivated talent base can create of its own accord. 

China remains a wild card on the international software scene. 
The staple of localisation — quite unsurprisingly, Chinese firms vote 
themselves world leaders in adapting software products to Chinese 
markets — is supplemented by common but rather unfocussed efforts 
to create Web-enabled technologies that scale. Groups such as the 
Beijing Software Industry Association promote a vision of Chinese 
software exports throughout Asia and the world. And when WTO 
entry is factored into the equation, a scenario whereby the staggering 


amount of capital investment in that market produces some really 
interesting software projects is feasible. 

But my personal observation of China has been of talented 
developers, simply lacking real-world experience. This status is, of 
course, changing rapidly, as developers join foreign companies to gain 
experience, or return from postings overseas. Chinese participation in 
projects developed using an open source model — and the associated 
peer review processes — could be of assistance in fast-tracking this 
experience, but a lack of broad understanding of this model and obvi- 
ous language difficulties may stifle software innovation for some time. 

A recent trip to the Philippines was an eye-opener. While 
political instability has impacted investor confidence, the country 
has quietly gone about leveraging their central location in Asia — the 
former US Air Force and Navy bases are now logistics hubs for 
Federal Express and UPS respectively — and created special export 
zones with taxation incentives to lure light manufacturing invest- 
ment by Japanese, US and European companies. 

So disk drives, mobile phones, circuit boards — there’s a fair 
chance yours or a component thereof was manufactured in the 
Philippines. Now the country is encouraging existing investors to 
deepen their local skills base. Many foreign companies are opening 
design centres alongside manufacturing facilities, improving 
opportunities for development of the local workforce. Venture 
investment remains light in comparison to China and India — a 
situation exacerbated by recent security issues — but this, too, is 
changing, as skilled Filipinos catch the entrepreneurial bug and 
use their new software knowledge and experiences to their own 
advantage. And while they have also gained infamy for virus 
production, this is a nation to watch in coming years. 

So where could Australia fit in the world software economy? 

On the upside, we have the benefit of being both a mature IT&T 
market in our own right, and a talent pool that can demonstrably 
match skills anywhere in the world. But we lack backbone tech 
industries that will attract strategic international investments, and our 
domestic IT market isn’t quite large enough to create the momentum 
that homegrown developers need to be internationally successful. 

We need an increasing effort both to promote Australia as a soft- 
ware skills base for multinationals, and also to establish investment and 
other support vehicles needed to create a credible commercial launch 
pad for software innovators. This infrastructure is crucial if Australia is 
to have a chance at leadership of the soft economy. 


Mark White is a former executive of Red Hat, Inc, and has worked in 
most of the countries in Asia as well as the US. He can be reached on 
mark.white@auug.org.au. 
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atching the Next Wave 


By Susan Dart 


any Australian IT professionals tell me I must be crazy to 
come back to Australia. Why leave high-paying jobs in 
Silicon Valley? Well, after 18 years in the US, this 
Aussie got homesick. Also, I'd seen how we stack up to the rest of 
the world, and I realised that I didn’t need to be in the US to do 
good work with highly-skilled people; I could achieve the same 
back home. Australian IT professionals rate very well overseas. It’s 
no wonder that, as individual professionals and as a country, we get 
ranked highly, when you consider the following credentials: 
¢ Britain's Economist Intelligence Unit ranks Australia second 
in ‘e-readiness’; 
¢ The World Information Technology and Services Alliance 
has us tenth in per capita IT spending and fifth in IT 
spending as a proportion of GDP; 
¢ ICD ranks us third in computer infrastructure and Internet 
infrastructure; and 
e The UN Human Development report rates us second only to 

Norway as the most desirable country in which to live. 

But I also came back for a bigger reason: to play a major role in 
unleashing Australia’s potential. Australia is well-poised to surf the 
next big industrial wave. That next wave is all about worldwide 
collaboration work. Some companies are beginning to recognise that 
they can expand their marketplaces and product lines much more 
quickly and inexpensively by collaboration rather than competition. 

In the US, because the marketplace is huge, most companies’ 
strategic decision-making evolves around “how do we beat our 
competitors and steal their market share?”. By contrast, Australia 
has a very small marketplace, and Australian industry has to focus 
on global marketplace expansion from day one. 

Around the world, companies are starting to see the value (in 
profits and image) of collaborating with overseas companies, whether 
it’s simply by outsourcing or whether it’s by direct technical, sales 
and marketing partnering. 

This next wave of worldwide collaboration work is all about 
re-thinking the value proposition of ‘competition’ and seeing bigger 
value and rewards in collaboration. This is coming about because 
of globalisation and the Internet, which are breaking down geo- 
graphical, political, communication and economic boundaries. 

Australia is well-poised to catch the next wave of industry 
transformation. Australia’s competitive advantage is enhanced by 
the following attributes: 

¢ We do complex, custom software very well; 
e We know how to handle small- and medium-sized projects; 


¢ We focus on market expansion rather than direct competition; 

¢ Weare highly IT-literate; 

e¢ We are a well-educated workforce; 

e We are very adaptable to cultures and languages; 

e We are an excellent testing ground for new technologies; and 

e We are viewed by the world as a ‘benign’ country with no real 

enemies, so we are ‘politically acceptable’ by most nations. 

Yes, we have weaknesses such as our trade deficit in IT; no viable IT 
manufacturing industry; the OECD rates us fifth lowest of 17 nations 
in research and development expenditure; and we have a poor record 
in producing technology for export. But those are not limiting factors 
for the next wave. We can use our collaboration skills to address these 
weaknesses, especially as we gain more global credibility as an IT 
economy and move closer to a skills-driven intellectual capital base. 

We can actually be the world leaders at worldwide collabora- 
tion work. Why? Because of the nature of who, what and where we 
are. We are isolated, remote and self-sustaining, yet stuck in the 
middle of the East and West. Countries that are used to being self- 
sufficient and collaborating globally, will surf the new wave quite 
well. Australia can assume the lead role even over the US in this area, 
because US companies don’t have to focus on worldwide collabora- 
tion, since they have such a huge marketplace at their doorstep. But 
we must, for our survival. 

Software Engineering Australia (SEA) wants to be the unifying 
force for the Australian IT industry. It can be the hub of all software 
activity in partnership with all software groups, and it can help drive 
the Australian industry into being well-prepared for the next wave. 

SEA will be partnering with software-interested entities in 
Australia and leveraging from their capabilities. These entities 
include: the investment community; multinational corporations; IT 
professional groups and user groups; standards bodies; R&D organi- 
sations; tool vendors; incubators; universities; buyers and/or users of 
software; government; SMEs; consulting organisations; service 
providers; and defence organisations. 

Most Australian organisations get stuck at a certain threshold, for 
example a small company may get stuck at ten people and not know 
how or when to grow the next step. To get past this threshold, we need 
to partner with others or have a big injection of ‘know-how’ and funds. 

Australia’s strengths and the timing of the next wave in 
industry means that we're poised on a precipice of great potential. 
As a country, we can either sit on the beach or enjoy a ride in the 
surf. I prefer the surf. And that’s why I really came back — to work 
with Australia and SEA to take this ride. 


Susan Dart is CEO Software Engineering Australia. 
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Practical Project 
Estimation 


their use in estimating 
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Dissatisfaction Guaranteed 


By Richard Chirgwin 


here’s a special kind of tiredness that comes from a long, long 
stint in a boardroom. 

It’s not the kind of “Wowee!” tiredness that comes, say, from 
doing something you really like, hiking or skiing or an all-night 
concert or whatever. 

It’s not the kind of “Thank God it’s Monday” tiredness that 
comes from spending a weekend trying to stop your kids from 
killing each other in the mistaken belief that they’re actually aliens 
from a distant planet. 

Nor is it the kind of “More Coffee” tiredness that comes from 
working all night to find out why the Cisco 2600 keeps saying “yes” 
to the unwanted telnet login every time you reconnect it. 

None of these. Boardroom tiredness is special. It says “I’ve got 
just enough energy to take a laser pointer to that dill from accounts 
if he asks me just once more to explain why a 30-second outage that 
meant missing his personal ‘buy’ order on what was an insider trade 
anyway doesn’t constitute a breach of the SP’s SLA, and why am I 
defending the SP anyway when their aggregate IQ makes them 
suitable to re-open the nightsoil cartage franchise in Booligal?” That 
sort of tiredness. 

I knew Quinn was tired because he didn’t bother correcting 
me when I got a couple of schooners of VB, instead of letting him 
skin me for something from Lichtenstein that was fermented in 
pigskin vats or something. I knew he was BOARDROOM tired 
when he couldn’t bother remembering any brand more complex 
than VB when it came to his round. 

Yes, Quinn had suffered through that most dreaded of events: 
the SLA meeting. 

SLA meetings are a major event on the corporate calendar. 
It’s the one chance that every C-class executive (has the C-class 
worked out yet what the initial stands for?) gets to look at figures 
they almost understand, to try and prove that they’re fearsome 
negotiators who can nail service providers to a hefty refund on 
their broken promises, and who invariably craw] out tail-legged 
and with their store of revenge fantasies refreshed for the next 
SLA meeting. 

“If the execs stayed out of the SLA meetings, I’d maybe cut 
some deals with the SPs that would keep things humming, but no, 
we've got to open the door to all the riff-raff,” Quinn complained. 

“The CIO was there?” I asked. 

“And the CFO. And the CEO. And the CSSO {chief sales 
strategy officer, he explained, which indicates the lobotomy 


worked}, CHRO [which indicates the lobotomy didn’t work], and 
the CSCPO [supply chain planning officer, formerly production 
director, formerly manufacturing manager] . . .” 

And, of course, the top company’s top lawyer, who disdains 
the “chief” designation on account of how he outscores all the Cs 
anyway through a canny combination of salary negotiation and 
executive extortion, supported by hefty donations to Quinn’s 
Spyware Fund. 

When the meeting is all in the family, Quinn explained, 
everybody’s talking the same language. “Everyone knows the 
SLA is meaningless,” Quinn said, “the trick to getting through 
an SLA meeting quickly is to get it all sorted out beforehand. 
What will they offer to get through the meeting in 10 minutes, 
and how far will I stick my neck out to have the company agree 
to a 2% penalty instead of a 10% penalty? Only this time, they 
were at someone else’s SLA meeting the day before, and I didn’t 
get a chance to deal.” 

That meant almost the whole SLA meeting was taken up 
listening to the user complaints from each department, one by one. 
And user complaints are a bad measure of anything, he says, because 
there’s no way to avoid user complaints. 

“Double the bandwidth and you'll have a complaint-free user 
population for about three days,” Quinn said. “So it follows that if 
you want to live without complaints for a year, starting at 2400 bits 
per second per user, you'll have to run 1.25 x 10(27th) bits per 
sescond per user at year end. Which is rather more bandwidth than 
you can buy off-the-shelf. 

“You can’t satisfy users,” Quinn explained. “And users 
can’t sack you...” 

“So you satisfy the executives because they CAN sack you,” 
I began. 

“Well, that’s the idea. But you can’t satisfy the executives 
either, because their job is to be dissatisfied. That’s the whole point: 
when it’s just IT people in the room, we all work to the Doctrine of 
Acceptable Dissatisfaction,” Quinn said. 

“Which is?” 

“It’s the fine balance between user dissatisfaction and exec- 
utive dissatisfaction. Stay near enough to budget that the execs 
are only a little bit dissatisfied. Stay near enough to performance 
so that the users don’t actually riot. And keep exaggerating the 
dissatisfaction to the SP so that they’re a little dissatisfed.” 

“What happens if anybody gets too dissatisfied?” I asked. 

“Why do you think I run the Quinn Spyware Fund?” 

“How good’s the spyware software?” “I’m almost satisfied.” 
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e-Payment Gateways for Banking 


For a copy of our intel 
Gateware information pack, 


Please email gateware@sienna.com = /)//7/. premier “ieee 


Deciding whether 
you sink or swim 


With the rapid increase in payments resulting 
from B2B transactions, automated payrolls 
and other payment files, Banks have the 
challenge of accepting payment files from 
any source, in any format and across any 
communications link. 


There is a product being used by more 

and more banks and financial services 
organizations around the region to handle 
their Bank-to-Business payment connections. 


Le 


the award-winning, Financial eBusiness 
gateway from SIENNA. 


Gateware is a unique, scalable solution, 
that provides a secure and manageable 
connection to corporate customers, 
whether that be 100 customers or 100,000. 


Gateware will handle any file or message for- 
mat, in any size and across any connection 
protocol, which enables you to combine new 
web-based channels with existing EDI, FTP 
and other channels and provide a consistent 
level of customer service to all. 


Gateware is the banking technology setting 
new standards in ePayment solutions. 


For more detailed information 


Visit www.sienna.com.au 
Call +61 2 9026 0000 
or email enquiries@sienna.com.au 


Sienna Technologies Pty Ltd acn 00s 524 623 
Level 16 132 Arthur Street 
North Sydney NSW 2060 Australia 


SIENNA and GATEWARE are trademarks of SIENNA Technologies Pty 
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Compuware can help. Take the mind-numbing task of scanning 
for memory problems and: performance bottlenecks, for instance. 
With our DevPartner Java Edition, you can pinpoint memory-devouring 


code and improve performance in minutes. 
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The Leader in Application Lifecycle Technology 
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